Analysis

  • max time kernel
    2643391s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:37

General

  • Target

    6a0e0ebab013869e6a23f989f05d69d64e060c4818a22ede238fbfb2e72175ae.apk

  • Size

    13.2MB

  • MD5

    391d1f7544262c75448f5512bc15235c

  • SHA1

    274f5201089c8cd47401758dc97ab6f1f1c1f56b

  • SHA256

    6a0e0ebab013869e6a23f989f05d69d64e060c4818a22ede238fbfb2e72175ae

  • SHA512

    b2b4173c12975d9fc2ad6c1b4da149ef84284c36a7858b64d24f2f7d3fdaea35f0d83284057ccb32910eae0b2f80ba0fff130519a14812717f1536f039ec288b

  • SSDEEP

    393216:rxVMBc03cn+dUNm0ttjvdTbOLZ/JsoSSaaigWZ4I:FVF4CTm0tH2dJqSNWWI

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.biquge.reader
    1⤵
    • Loads dropped Dex/Jar
    PID:4226
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4255
      • sh -c getprop ro.yunos.version
        2⤵
          PID:4276
        • getprop ro.board.platform
          2⤵
            PID:4255
          • getprop ro.yunos.version
            2⤵
              PID:4276

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.biquge.reader/databases/bugly_db_legu

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.biquge.reader/databases/bugly_db_legu-journal

            Filesize

            512B

            MD5

            1500a355d2d7aa0f0477c15bb427a344

            SHA1

            5e2af8efd97f3824c2734b59cccaf3865e627130

            SHA256

            946e6e5c6402411f00d2f9651ba354e8a4ac9aff246919060138be1d714a0892

            SHA512

            9ed18e4a4ca1b30bcda63d0e85c8b12743d7f9bff16e6eb8464a4cffb3009a936e836606d616c927aa9cc961f299f4787e4e549d08b6a2b642b62b1a27924a64

          • /data/data/com.biquge.reader/databases/bugly_db_legu-wal

            Filesize

            16KB

            MD5

            9c22edca9ef4611c1a18c330ef259b88

            SHA1

            1bc30b43ee7722cd9a48c6fe3aa24b6ae375f89f

            SHA256

            e24553ea40bbfbbb330fbe2f1e29040686448cca14f53fb45e989d7288d107b6

            SHA512

            1dd50041a219bce44e64a100ec67f41f76b5f203b76a9a740ed756eeb01f7119dbd27cbc03ae8c513cd12c8152c155bd35bb4e1f3f0b4e78d437d94d0ac3b4cf

          • /data/data/com.biquge.reader/mix.dex

            Filesize

            292B

            MD5

            63f77f99bd2c2b772a479923bde11974

            SHA1

            c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

            SHA256

            4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

            SHA512

            3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c