Analysis

  • max time kernel
    2623994s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:09

General

  • Target

    61e73bc5106ce08ce1d73f25f3e35cf00be0af065856d97f31a75d3b73052c9e.apk

  • Size

    11.6MB

  • MD5

    0d61c87defa43d8e844a0bde0c48805e

  • SHA1

    a50383f77bce98e33a0617c0aa4254ea57d12254

  • SHA256

    61e73bc5106ce08ce1d73f25f3e35cf00be0af065856d97f31a75d3b73052c9e

  • SHA512

    dbb39ddb63c06312640b411edd05788392753df6ea2219892f736385c0513e7af9029be7d5b556367a0fde573d661aecf594321d89a200f72005d4b1fab42099

  • SSDEEP

    196608:uuRFqFkZY4BoQ44iGMLq44ZMgp8NqRkw9YSQYJMqR19/UUNOjlckAGFDjw0+V:DF971k33YJTRXUW1UU/

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • org.unionapp.fcjy
    1⤵
    • Acquires the wake lock
    PID:4260
  • org.unionapp.fcjy:ipc
    1⤵
      PID:4293
    • io.rong.push
      1⤵
        PID:4320

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db

        Filesize

        36KB

        MD5

        ce6135aa1b1fe4f2c2db2a546d2a5558

        SHA1

        79b59582154017aadab783dc266fcb158c252940

        SHA256

        7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

        SHA512

        2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db

        Filesize

        36KB

        MD5

        5d7ea1a23af19b4340cc8d90f28297d5

        SHA1

        4cfe95b23a9e98378d69c4290af81b51fbe76aea

        SHA256

        474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

        SHA512

        33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db-journal

        Filesize

        512B

        MD5

        da1606fe20de8ef22b79b14fa339babb

        SHA1

        06ab5893cb977e873b015e48ef456f486ce69b1d

        SHA256

        1634af5eed4420ef3eae21fcc72114b50e2c1309b6bfcb7a7766155b969dfaa4

        SHA512

        d0e21063a27d4dd047ae1f36de7262c39f59886e1c03ecd393ac9fa144c58d22fd85a8d6d404e2b531c84608dc318583a44121de8e0dc6b442ab6cb0b9279ea8

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db-wal

        Filesize

        16KB

        MD5

        ab16ec0798e825179ab4f3d1d9aa6c55

        SHA1

        31b27c61ea2a7f6b09e593b53105650bdd4778aa

        SHA256

        b445a6401b0b9c77c08b38fba8e71cfe7151b4abdffc2db514a6a2276d851a23

        SHA512

        03060600690e6f68c23c30d2888bc1999c2a2a4ec661775d6d9182284a67175577dd3dead2e4ab5666ccccd936be789c79734eabe68f74b620f0d46209f7bb72

      • /data/data/org.unionapp.fcjy/databases/cc/cc.db-wal

        Filesize

        48KB

        MD5

        34298dc0167a62e6ba265328e08ccae2

        SHA1

        6a445062fad315d909357aba9fd460dccd4505b7

        SHA256

        cc929990ee6dbbab7a299a0dd8f33bd5429d2506bdaac9b58f137d438fcdfa73

        SHA512

        ae99432ba30ffe4418ce125b88034703764bc1c1f7373f33a377aed97bbe8f49e44a2252b73b1045b0d6d25b2819d19a1035fbda18038030b8182e43523a6a0a

      • /data/data/org.unionapp.fcjy/files/.um/um_cache_1703431043831.env

        Filesize

        1KB

        MD5

        bc3a48ac1fd2e5ef7d406f03a1636292

        SHA1

        b23a677921aca8246bdc2eb5aa57fa999c98db02

        SHA256

        77c091ae352bee5e15fa440ff70663a4fef20f0b261d108261683e2d7913de21

        SHA512

        5335ea5433393a327139393069fff44484e899afd32fdbc73790b6c9315b78fa6535766359d97f10e228f2dc569bbbc0f0e51f44d4f2b571f697672537f86fcc

      • /data/data/org.unionapp.fcjy/files/.umeng/exchangeIdentity.json

        Filesize

        162B

        MD5

        a7cad25b0cdfebca73ea1b12cd48eda7

        SHA1

        fb73616689849c80bf52a78dbd09502f6a274fb5

        SHA256

        0a3731d46d5bc62aa42b9f14008ac4042a4fc7419283abfd9c3118b2270ec929

        SHA512

        d7286630d9dc3ced23a6b9d25192c86c1784d54d01b41555a56a13f6d5ec53d4c5d99f5f5e333dbddcb1ee425b399fa4c401471ccc14d478ccddde2007da6cb7

      • /data/data/org.unionapp.fcjy/files/umeng_it.cache

        Filesize

        498B

        MD5

        971a96656393fb5fd079cb37d5196083

        SHA1

        da86653b1283ef25364d5e7dcca7791e9b465bcc

        SHA256

        72827f4c5ff0e9c6453a3cd054e005626e483967e88402b66a7d4ba226c7d13e

        SHA512

        e3bc0127cb4200f461f876fed311313fb9eb1889b44166acf17da0f6c739362ff27afb680f8197cb510fe673fcea51c61b74ce3cd0021aa10ca4653a2a335691

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

        Filesize

        381B

        MD5

        b7b9b8e3ce57ce50922d95dec6c2b3d9

        SHA1

        c2dd0f2e30375399a18b2df6c7a70e2c54bc9508

        SHA256

        ee3e337f6567caf6a9e8646e24cf537f745d1ffd18c15a36730185d94681429d

        SHA512

        5dc6bacf300867d7e955dbcd80bb01a715130d1388a4a7031aaf3d82ed0b54859a3755be747271962a06e3224f45bc767122c0c9f31b1cbd140b363157d74004