Analysis
-
max time kernel
2612237s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 17:54
Behavioral task
behavioral1
Sample
5d9e038de152099d786cf31b3b77aafce9e99c7db552278e34df0967d6f3d830.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
amap_resource1_0_0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
amap_resource1_0_0.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
amap_resource1_0_0.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
5d9e038de152099d786cf31b3b77aafce9e99c7db552278e34df0967d6f3d830.apk
-
Size
20.2MB
-
MD5
6daccd4c6400bba87187526ed82e3b4f
-
SHA1
af8a7151c80b527a519567cbd9af93b530b4b2f0
-
SHA256
5d9e038de152099d786cf31b3b77aafce9e99c7db552278e34df0967d6f3d830
-
SHA512
add37e620365aa3466721ad83d47570a2d8c02b08b1a0f2c27eb928b9fde577a5604b111a70e31bdb265db85299058248b6b7a37646b0e4bec5afdc92bf41c84
-
SSDEEP
393216:wJ7zi4jiVzOLjcyCTiZ/V0DfzgkwY0gsP59jj3p9ZxOZWmmk0HMCG9l4wdq:wpi4jNveT0/VUzgw4H9ZxOZWZ7MLs
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.times.metimes
Processes
-
com.times.metimes1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4268 -
/system/bin/sh -c type su2⤵PID:4321
-
-
logcat -d -v threadtime2⤵PID:4346
-
-
logcat -d -v threadtime2⤵PID:4364
-
-
/system/bin/sh -c getprop ro.miui.ui.version.name2⤵PID:4386
-
-
getprop ro.miui.ui.version.name2⤵PID:4386
-
-
/system/bin/sh -c getprop ro.build.version.emui2⤵PID:4414
-
-
getprop ro.build.version.emui2⤵PID:4414
-
-
/system/bin/sh -c getprop ro.lenovo.series2⤵PID:4439
-
-
getprop ro.lenovo.series2⤵PID:4439
-
-
/system/bin/sh -c getprop ro.build.nubia.rom.name2⤵PID:4463
-
-
getprop ro.build.nubia.rom.name2⤵PID:4463
-
-
/system/bin/sh -c getprop ro.meizu.product.model2⤵PID:4493
-
-
getprop ro.meizu.product.model2⤵PID:4493
-
-
/system/bin/sh -c getprop ro.build.version.opporom2⤵PID:4517
-
-
getprop ro.build.version.opporom2⤵PID:4517
-
-
/system/bin/sh -c getprop ro.vivo.os.build.display.id2⤵PID:4543
-
-
getprop ro.vivo.os.build.display.id2⤵PID:4543
-
-
/system/bin/sh -c getprop ro.aa.romver2⤵PID:4568
-
-
getprop ro.aa.romver2⤵PID:4568
-
-
/system/bin/sh -c getprop ro.lewa.version2⤵PID:4592
-
-
getprop ro.lewa.version2⤵PID:4592
-
-
/system/bin/sh -c getprop ro.gn.gnromvernumber2⤵PID:4616
-
-
getprop ro.gn.gnromvernumber2⤵PID:4616
-
-
/system/bin/sh -c getprop ro.build.tyd.kbstyle_version2⤵PID:4643
-
-
getprop ro.build.tyd.kbstyle_version2⤵PID:4643
-
-
/system/bin/sh -c getprop ro.build.fingerprint2⤵PID:4669
-
-
getprop ro.build.fingerprint2⤵PID:4669
-
-
/system/bin/sh -c getprop ro.build.rom.id2⤵PID:4694
-
-
getprop ro.build.rom.id2⤵PID:4694
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD51ed0e61ad68b822beb7e1e26ab89a996
SHA1ed71936e7c6e27f2ffa477884648d2c162235f8d
SHA256a3fa6c1c602640acc9f124a07d2210ce1fb074d9a091d506d381d31fb8a73118
SHA512334e5b40d11eaaaf69b075e7a2276399d072e0fbce821eb708a72a960be656cf28b1edfddbc365e4cfb1e87fef1b99e7847120f05f2525b65fb60cce3112f52c
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
92KB
MD51a70604972544008f674198a68129291
SHA1689b3067050f30e49b936fa969e7d6b257abf3a2
SHA2568820d4751d6ad85173871387a0c4178b468f12f7cfcfd957f9fffa422eae5289
SHA512903dd8689112f2bf0b725f7e6a1b9352c868825350b6014a15fca8a5debb36b655867e8d2e54cedf7d62b9249014874fd3bcb1bab1cfd1578c1dc04d2e7aaea8