Analysis

  • max time kernel
    2580892s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 18:06

General

  • Target

    60b00ba74e04a6f268ebaf15d433d9fbbb6fa3ceae1c0e5addc37e178aaf7b44.apk

  • Size

    5.6MB

  • MD5

    f5ae4204395304de43a361327432f5da

  • SHA1

    211c45896e0860dc5d60a2e6e1c6195a71574f6c

  • SHA256

    60b00ba74e04a6f268ebaf15d433d9fbbb6fa3ceae1c0e5addc37e178aaf7b44

  • SHA512

    4161e9f28f3513e198efa140c5f2065d479606ac013d3330a5a499cd19124c152fa108aaa3d0f14a8e08cabb994a9449f563112bf5ba2a50a83274319b9f7f30

  • SSDEEP

    98304:72ORxCIcBe5avPT42C4YpYFaV6AmIkp206UBQW9+7lPD5UN22Tm/8cl0PdPuJ:k2a3yVpsawvp2SBbc5UNm/WPI

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tuan800.tao800
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4611

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tuan800.tao800/databases/tao800.db

    Filesize

    48KB

    MD5

    b849583972c2d97fb4b965847705511a

    SHA1

    04b6e61a1d67c42b1c69becc56c854109cb6fc0b

    SHA256

    a4c19ac698b528cb29b7306f25fd49bfc2891073c0c2a1ee3180bb69b31be995

    SHA512

    64db3584354e1f95180e217ec3b1bbac62196fe0925892eccb6336e96696f1fe0a605bd5cd455d3f55cf20490eca5c3eb90259b6d8c51a60ff4179ac9e7a6598

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    8KB

    MD5

    fd908cc6a1340872ef4a3b3ea116fa82

    SHA1

    c37d8b35d1eba856f292392f2aed5ba5d529b1ec

    SHA256

    e827233f160cb8a0ffa60f43607b87132a25ee4994d956709c65262130a8638e

    SHA512

    bea56bdc48402149b4f4ac1e1fc36beb1644226087045b4b2cf143130d81ac5d5ca1a78212dcdfa7ee272ad74c109437d33ac344bf20b14c5837d6a5ce581ac7

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    512B

    MD5

    44a38bdb536c34ad1f431c1b36299a12

    SHA1

    e2b856ad8a751d1157a2c17c3e34b6f9719f624b

    SHA256

    7f173302290c837969cfea90e5e1e1d048d3d9c3e4944e718ad88884ab38b9fd

    SHA512

    23ff513c41df8f9d6804ee0a6735bfa0aca49b2d943bed85d548539053001d0579e52a27ab103398808d7c2f68d230a52bb3ed00dca8f6be8625aecbf5f183cb

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    8KB

    MD5

    7e9e529f13f2df32e62d44518b928c70

    SHA1

    a0ee78c2a5c8c5685cf889ba1bb5144f776a4976

    SHA256

    7eeb3fdf255de8b893249841816c06b6741460645013862ad3bcbe6e99d49c78

    SHA512

    fbe62f95e4b2bad4df93c0ee61c05f5244e0171aed7601601058709163e792736441087c27d34aca1729f3e5f86ae6ac6627ea8d810f71239e52347e23bcb8e4

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    4KB

    MD5

    b19536bf5f0cca2499d0e974857dcf90

    SHA1

    92dbefb090089f0938113c4598444927395af8fd

    SHA256

    73c22f418cec31a795bac466287caab05393ce18c336541bb684e1cf70307ff3

    SHA512

    ae2b15580cbbb5175d04e02c6f80234841da3601ac2b9620eb7a7dea695b0b1c6815cc20466a4f9c18a2fb05309181f9a99f9d740d1381de31d27b9d1efce5fe

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    8KB

    MD5

    6407f7c494c795733dd7842ea82dc111

    SHA1

    10637b3364ff2b189dcd8639dc3d9ccad4b53231

    SHA256

    f4aebd106d3b45189364085121ab854af40e0e7fdc39fdd5ee002c2a38175892

    SHA512

    c54ad666d3bd7f3700ea17124464185f55e7978197c469391d31ed7c8d487b649f48b2faf894c6e3cf2a71ebfeb1627b73181c4c462d8c6b03b0d1cdb112a28d

  • /data/user/0/com.tuan800.tao800/databases/tao800.db-journal

    Filesize

    8KB

    MD5

    b43e368a6a9848524101a7339eec8cfe

    SHA1

    9413091b92f9f94580d07858355bb43590f3af4b

    SHA256

    75541d2c424702d0db49a7d33b95de1e3ac4606d55818092676ee5e036939604

    SHA512

    dfd603eaff42ce7936121a9ac19b642cadcd1918b3332774fc6d234c5c6cbe35f22086ad9c898ff6e25365c8eadffeb55f52d4718f989f5b198a68cbb99e4e26

  • /storage/emulated/0/Android/data/com.tuan800.tao800/cache/tao800/journal.tmp (deleted)

    Filesize

    35B

    MD5

    333c9317fe602217360472669f8ad67a

    SHA1

    35cbb8c236d29105468d4356340b703335663385

    SHA256

    18fd432c409adf8fc360549bea7c311d35634d0c2c02208e95e3f6a0d663875a

    SHA512

    a6d9e7a1c2d0a9b2c61989f052caa8b2e32737188a135224a21e06878a69be026a0131450772dccfcb028f8523e0611fe7a5343eced447be11b6a13ffff6a3f9

  • /storage/emulated/0/Android/data/com.tuan800.tao800/cache/tao800/journal.tmp (deleted)

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56