Analysis

  • max time kernel
    2609650s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 17:48

General

  • Target

    5c735891bb858d319f59128fd227ea17a57e6cc21f760ae79aa110ab4fdb3e12.apk

  • Size

    6.0MB

  • MD5

    cf8716c44442a1aba8c498541b50ad44

  • SHA1

    07b20e1e8f78fc50dd3222e186e8a4b9592385cd

  • SHA256

    5c735891bb858d319f59128fd227ea17a57e6cc21f760ae79aa110ab4fdb3e12

  • SHA512

    48e8adbfb1424e446a226d40e447afc495d8b3f73320a44af71a4b4b0d366f53f042fe9bfc1652df7ca46f892b6de7005fb1c1538f5200cd6eeebb24394d4cc8

  • SSDEEP

    98304:FLCsacQl9hLR35NNo8gPTJPnIN8FkepqWWcYFMpv4ouiDYA5EizwMy:FLCUQHhLRJs8gPNPnIN8FHpqbcwi4o5A

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.resou.news
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4267
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:4322

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.resou.news/app_crashrecord/1004

      Filesize

      221B

      MD5

      36caff50c4bd86988be5b73dc65043ec

      SHA1

      df6867dc1600b9303944963634a9e9a524b6f7c4

      SHA256

      bb9f649e0daea812d4822c978d609e0df50a7d345c88599819df6df332655704

      SHA512

      78feedc1fcf88f0df8c114d5bf2088c9c8dac6570a0acbc429efc2d8d3ffe953dbd688b805f25d5dfce08303a56051a3d8369ad5b77da9e8755a5939858f0d78

    • /data/data/com.resou.news/app_crashrecord/1004

      Filesize

      58B

      MD5

      0d210bfb2a0e1f1b4c082a6a0f79de07

      SHA1

      bb8ed9e364db79d1d9f2fcde3f15091893222faa

      SHA256

      988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

      SHA512

      536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

    • /data/data/com.resou.news/databases/ThrowalbeLog.db-journal

      Filesize

      512B

      MD5

      abed7a31dc8c51cfe78a48617ccaa26e

      SHA1

      5c4e24177d52809a97df8c3c25a1763b5fb07c92

      SHA256

      2781e51d8969250f54e06ce1a0eb7f9d34b6b63f50a75cc2787d633fbb94e6d5

      SHA512

      f168da8ffb3ebe3f22e2ee11fee38fdfb3d2562904414fcdedf22aade8e28f88da211d71ca5b8196100013886f4e91ccf93b33bb961039c40424b74a43925c8c

    • /data/data/com.resou.news/databases/ThrowalbeLog.db-shm

      Filesize

      12KB

      MD5

      4072783b8efb99a9e5817067d68f61c6

      SHA1

      7cb41fea50720b48be0c145e1473982b23e9ab77

      SHA256

      f3cc103136423a57975750907ebc1d367e2985ac6338976d4d5a439f50323f4a

      SHA512

      b9b362ac8b88c1eaae1fa87f8498050450d7aa6c7d07698c3aaf8a355b603b6d535e74b47f6da4b4798b04df58b3b6eb1dbc4782fa07756bce10933ed86017d3

    • /data/data/com.resou.news/databases/ThrowalbeLog.db-wal

      Filesize

      32KB

      MD5

      b92b93642c1570a8844f605730e00f92

      SHA1

      b33c808845f91440971b8bbe4e5b2d72fc667072

      SHA256

      979f38d9109b12c26f653aa5a09442145bcc39ad3f1f23e32149edb1441fa52b

      SHA512

      9a161b9f493c0ba6f12aac75694a89b5cf511459b0195e3a572474925cfba99c67b469544e72bce7ea3c88d9cce310c7a24871e594f26fd260022c1045df7949

    • /data/data/com.resou.news/databases/bugly_db_

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.resou.news/databases/bugly_db_-journal

      Filesize

      512B

      MD5

      aa75763d13d06d35daee2e1a7ef6fdfa

      SHA1

      e7c8f1df54f48ea38ceb10158695e73d0c62c2a5

      SHA256

      ce7c0d0086b622f3f36c08d414d89e9c3f4855c864c508e483f99a2499fcdaf7

      SHA512

      da6143f0f7fa6e79e30966061e8bbf2eb66c7b6467e3a512827fc065dc8197687a3706e6ad7d6a6cfca961effaffeb375c36128ebc13f43ad449f36ec113d5f1

    • /data/data/com.resou.news/databases/bugly_db_-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.resou.news/databases/bugly_db_-wal

      Filesize

      68KB

      MD5

      bd0d5b3459e2d4df63d54eff09352ed9

      SHA1

      51a219a5e17fac88609832d39855fdfb44c6b7fe

      SHA256

      78ce2360fd7ac9570800a9fd065afe63a1b060c2b1e2f3e95dcaa3df28e508c6

      SHA512

      0ceb1bdefed9b8d3c378bb7511ff8fa581810731c95a1a708cf3b7e6763f74c310a4d44d84dd50479694a167748b9c9937fe6897e9cffa3c0c0f7f1816f06a1f

    • /data/data/com.resou.news/files/Mob/mob_commons_1

      Filesize

      2B

      MD5

      99914b932bd37a50b983c5e7c90ae93b

      SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

      SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

      SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    • /data/data/com.resou.news/files/Mob/share_sdk_1

      Filesize

      23B

      MD5

      8e24e79baab91c4d0604eaa9006a0cb3

      SHA1

      e427afc94a4b957a7096f73e395a10ea404c076b

      SHA256

      65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

      SHA512

      45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

    • /storage/emulated/0/Android/data/.mn_410185822

      Filesize

      98B

      MD5

      0de0631d3a5f78be59641e665052eb2d

      SHA1

      de04ca715da734bd405c715fe71e227e03af5272

      SHA256

      bcfcdb4354392868daf129950ee53897aef70c856c7d59a9ee8c1e51ec1d9e65

      SHA512

      ff4761c31f161066b34be5c7e92ca67d7d13976ec55fe25388f258f0c42982c968eb46cfbae22f080137eec60c2633acebf881aaf9b308c5ae5d55bdda7abc1a

    • /storage/emulated/0/Android/data/.mn_410185822

      Filesize

      146B

      MD5

      893fd5edfa4186aa2c715740aee871c4

      SHA1

      682d0439a6d6f9d65c52955c940190c61f42178b

      SHA256

      0e83256c559031907ff4e3f2c00b55448439b2b203f126ac44c8d1ec685c3baf

      SHA512

      070acb546d245e7c52b97aa931e71f15a41bfcbb9fed4fbabf9d311566f0c35ba2268710b373d754177d7faacf3499dbc78f5382990cb877fa4dc74448786236

    • /storage/emulated/0/Mob/comm/.di

      Filesize

      57B

      MD5

      70a42cba408700f9a6c01c7941a8829e

      SHA1

      eab01cc2c0671538795fb0b1146017dc099d0984

      SHA256

      499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

      SHA512

      8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

    • /storage/emulated/0/Mob/comm/dbs/.duid

      Filesize

      132B

      MD5

      ffd722c6cf447a51e8da02dc212376a0

      SHA1

      09db4d0be84539b7a013e13553462baf02ae5bc4

      SHA256

      1e9ec80c0b3acd06f0b01ffdf10d8a6fe755c5b5feb496512bb62e3565167e4e

      SHA512

      9311749f67579fd1d12675c5d54fbeeab9297b05762880d1f898e7bbedb1bc38340b28c18fb8601dacabdc1ede08dbc0375ece2577b1ec572c145e9a4fbbb0ef

    • /storage/emulated/0/Mob/comm/dbs/.lecd

      Filesize

      772B

      MD5

      1f3937a898c0bdd49f01ad923cc727d8

      SHA1

      2ce5a5f71fafc9221e7cc0507beea13f50397e96

      SHA256

      a54a3b453863af79edb1aae5150cbc6f56190c4693f4441f7fa693fd05833789

      SHA512

      fb3d3c913d1d5deb24cdfdefd5655b08ea11a3bdb9ad013e1cdca95438ab4b222fd3177c0175a12513e00d38aaf70c9b603d6f729df523819f0a57c0037b46bd