Analysis

  • max time kernel
    2627436s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:14

General

  • Target

    630a526c2dd95f2db916743c249f14d2ddd5c790f842c6a7934d7dc96908f97f.apk

  • Size

    12.2MB

  • MD5

    68b7ed4875762500922ae32f52264481

  • SHA1

    d0b4d45597db258d09fa676099e67a2c97622947

  • SHA256

    630a526c2dd95f2db916743c249f14d2ddd5c790f842c6a7934d7dc96908f97f

  • SHA512

    5039394e54c3cdd2093d074a22640efa826690a165e89bb319a7a44f97df5f0d09a8906a2a70fda6313d5eb71832a5ac936f4e35851959186b32c38cee1ca2e6

  • SSDEEP

    196608:UjY1WEBrwdWMI7yVuA3FyLZ/Zd8xlyLVOZd8taKNHduO4iMmH:UjYsEBOWMIMuAE/ZMMOZgPbuO4AH

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.zw.ds6126
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4473
    • /system/bin/sh -c getprop
      2⤵
        PID:4509
      • getprop
        2⤵
          PID:4509

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.zw.ds6126/app_crashrecord/1004

        Filesize

        222B

        MD5

        b3187d11ed2ee960366ca9937db3bb67

        SHA1

        7da750fc4363b8d1be1d2d069d51aa47d8617f7f

        SHA256

        13d10edb8981aa0088c124b76799f9f7a8aff7a1bb42fafce8fe62440da541b6

        SHA512

        e2f41733513ed7e37652515bced0445daaa7777f5d15eb62a01d712d216666d29bf6a9242cb1babf625304d97b0ad669acf2919ba5880393b5991813b6e8b47a

      • /data/data/com.zw.ds6126/app_crashrecord/1004

        Filesize

        58B

        MD5

        0d210bfb2a0e1f1b4c082a6a0f79de07

        SHA1

        bb8ed9e364db79d1d9f2fcde3f15091893222faa

        SHA256

        988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

        SHA512

        536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

      • /data/data/com.zw.ds6126/databases/bugly_db_

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/com.zw.ds6126/databases/bugly_db_-journal

        Filesize

        512B

        MD5

        9e8e953138b9a4701a275769be75af5a

        SHA1

        cc464fc85d975089bf9cccd2fda44339ffa058b8

        SHA256

        139c4cc304881b9207f1336c44aa7c7f29c879d3b8d610ee52fdd47364d38c03

        SHA512

        4e7706deb0e66e51d0b3ec693ce068e1fa0415e1c1b843c5cd66096d6daa47bd6a35ce8ce677ace7b4cf308af41f22f2cb75f849ef430236435b102dd14c9cbe

      • /data/data/com.zw.ds6126/databases/bugly_db_-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/com.zw.ds6126/databases/bugly_db_-wal

        Filesize

        68KB

        MD5

        15e22fd5edb9460bb6c0edf1080c7f51

        SHA1

        0ce01ad4c51f3a4d3449317d666960e06e29a80a

        SHA256

        db34d0ce0d9e0cb9c2680afd91c28d03bc410b9e08130c900d7d758dd58e5186

        SHA512

        2767900f0adda5e627e9830cad6e49cecaf903a57af936f61bb66378a0acf0fa86a93d117dc79c4abe7a71e68226e5e2ae1aadc6fbab8d8887818c25cf07b0d7

      • /storage/emulated/0/Android/data/com.zw.ds6126/files/tbslog/tbslog.txt

        Filesize

        2KB

        MD5

        837b3ab2986d6e0b6f287538111348e0

        SHA1

        082c4cd1a0959ec9111a095575072484efe09ed8

        SHA256

        5e936517cb8464eec50c55094ba34da10a51d8ade1adcab9e41eaafeccea1460

        SHA512

        ac7a70f314f1698d622372825acb1b0a28a06edd6a0c60076df46a0005a05a234b524cfa5ef50f3780b6f8d49877332d85146edeec7ec173a4092be8d3fc5e20