Analysis

  • max time kernel
    2577820s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 17:58

General

  • Target

    5e775f729a4bd8571fef864b686c17d6275fa790cb9e07a28ea948044220493e.apk

  • Size

    24.0MB

  • MD5

    2787b42306a492c76bafe32d59de017a

  • SHA1

    9cdd2110a0ac8c47558c70d38e4659fc210c1960

  • SHA256

    5e775f729a4bd8571fef864b686c17d6275fa790cb9e07a28ea948044220493e

  • SHA512

    cf1c2dbb01ea733b7807acf0138e1353f414fb5e1cbc8b58355e40ecbba4aff0ee21cc42f98c56cf9b62505ef11727f179f699c290bc281ef0089d70cf3248ae

  • SSDEEP

    786432:w3TUwftt4j/35tiWjbHtFtj2htJzj3f1HLR:Tw1+P1dz2tpH1

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.eshore.pms.xmt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5083

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db

    Filesize

    52KB

    MD5

    ea9e08f83e389ae886aa74351c5b715b

    SHA1

    6c85f0efddce566fb43b590d62ce137c1b853bc0

    SHA256

    6d4bfc69028aa00dfeeed3a0ef4700812c7b79cc32b4bb28718391096368e4e1

    SHA512

    7e51614590c8d7e702afaab1c40bc4c0f6eb9c693a57bb8572b4503d71548c99232b7a88cf5e1f152b1978d04f22699611bc2deec881ef6ed68bb56d2a8733f8

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db-journal

    Filesize

    512B

    MD5

    00c4910cda3e5d3752b7c2bd42a34a7f

    SHA1

    2acdb85e76a69574786b2f1155dba221b716acb9

    SHA256

    e17305ece8d76b9950b6878136b5d9c488fef896669fe4dbe87175dbc5a77ea7

    SHA512

    bd2f06ac6b8d518a05d2c1c87aa72630b72528ab3703a5c82a4757d9e3b1d774c556bbc8ea5b28e1cf7a07de75640f3e2484b8ff33ca3b95e0f8016118af8d00

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db-journal

    Filesize

    8KB

    MD5

    7c44265dd2e85d4e96983ead4875cecc

    SHA1

    f6a3dc0be329d89a3c39a821fece5cafc33bd0d3

    SHA256

    3a1b4adfd83c8b1dc3583bd83b91ce7db1905476a56356192d0b12211633dbf1

    SHA512

    8dcb389428ad3aa27d1084c10be9ec245e222d7fd369b059fabe1bc0dd27a34b0e26ccae6b15eeb482682057402ab939574652fe8ea3fa3be46bd7fe99f489d2

  • /data/data/cn.eshore.pms.xmt/databases/xmtPms.db-journal

    Filesize

    8KB

    MD5

    704a0284c051b73c9fb68889d14c17f9

    SHA1

    ae53df05ba0537c1d60eaddcc91e4f9135002701

    SHA256

    bbaf0a7b4e789fb295ce883696cc5d8b7c014ccc5d4c34535a74655111de5830

    SHA512

    80313de43ab1b45ddd4cceaa2f6df724b23efe54977a273f07a112fdf84970cc7ba15116ddcf84cf753b5e123cd5cc5860df3d952857805e23791d195522b18e

  • /storage/emulated/0/Android/data/cn.eshore.pms.xmt/files/tbslog/tbslog.txt

    Filesize

    2KB

    MD5

    7c040cad887ec07d8cfc73e411c6df57

    SHA1

    b09916a62c868157e3f0315107a34ecc129dfc28

    SHA256

    c41436543948f178ba71f2503a0951e8233a4b6760c5b38d76beec92222d4501

    SHA512

    7e0d6635eaa57c86f798f929f8c525dfb3716d293bdff99474165cd594dfce1d7106808b68014817b0fb8279d09f02981617f7d071d610166fa54b0d22ac6c47