Analysis

  • max time kernel
    2615314s
  • max time network
    129s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 17:58

General

  • Target

    5e775f729a4bd8571fef864b686c17d6275fa790cb9e07a28ea948044220493e.apk

  • Size

    24.0MB

  • MD5

    2787b42306a492c76bafe32d59de017a

  • SHA1

    9cdd2110a0ac8c47558c70d38e4659fc210c1960

  • SHA256

    5e775f729a4bd8571fef864b686c17d6275fa790cb9e07a28ea948044220493e

  • SHA512

    cf1c2dbb01ea733b7807acf0138e1353f414fb5e1cbc8b58355e40ecbba4aff0ee21cc42f98c56cf9b62505ef11727f179f699c290bc281ef0089d70cf3248ae

  • SSDEEP

    786432:w3TUwftt4j/35tiWjbHtFtj2htJzj3f1HLR:Tw1+P1dz2tpH1

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.eshore.pms.xmt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db-journal

    Filesize

    512B

    MD5

    19025fae8c3b745032cb3ffcc934888d

    SHA1

    052307289b9718ddb6e396035e9e7af4955f6216

    SHA256

    81bb129404248f4faffb94abbe87b90056b477243cf746214e4ff52ff181eaa2

    SHA512

    f8424f186da0fa0ed4dc523546208ade67457dd75c201d23efcd651bc272a4dfb0f941647fdcf80dc233bc36311c85cb3a5c8bf403ce67fa782c6cb84abc2e0d

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db-wal

    Filesize

    16KB

    MD5

    b566b411947ba74cec3f7bdc4b8613c1

    SHA1

    7da13c9dfa6d88360a95d7f702de03ebd0554109

    SHA256

    6e597fde34e3c9dfc062c67613019274633c69d116fe202f4bced90b2c847b5f

    SHA512

    a1c5fff7dfd1fa32a09d8c686e2fd8d38df336ebf55283b708dc552f7604b8b5017634f054d2f6d9f54b82ac876d810143aba706aabdd993d3f27d7c03e1a91f

  • /storage/emulated/0/Android/data/cn.eshore.pms.xmt/files/tbslog/tbslog.txt

    Filesize

    2KB

    MD5

    502ced5b2d63fef0af4d97c8be7f9e52

    SHA1

    da5f2a813dddcc766260c764090eac8b2c8de8c3

    SHA256

    b0a865c1c02d18b1b75064ff8d255db381f272c80a49c7f7f85dbf12d241b926

    SHA512

    c0c54a35e19494acf76aa6bdb9c81c3589e56b39e438370b08d7b34093ac44beb75694453945aaef3bc3a8f4308e61b5a850eb47426f05596111c325194f309d