Analysis

  • max time kernel
    2629672s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:19

General

  • Target

    649e1fb4cef4934460971c88721a7f274026007e64eeb6aedc66498434d25311.apk

  • Size

    20.9MB

  • MD5

    e3af8521ce688a6cfe64e8f6f53a5f63

  • SHA1

    dee71d93682bf45cd2a7025d541ff153083b26d8

  • SHA256

    649e1fb4cef4934460971c88721a7f274026007e64eeb6aedc66498434d25311

  • SHA512

    d4cc8e8c0838ba24b4a034f31f0dac1af30efe8a705e58ace71fb8b6596d7daa6a808ed729125a950f9df0d5ca440bcac98821dc258f4ee2d35f575ed782c32d

  • SSDEEP

    393216:H4lUxheV1ZlSNXyuxgqOei0TmelIU5gFAIyzK5QLVa3rBRU0FfkrsT:HiHblSNXywOeiCx5gFszxVa3rU0OrY

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.yaotiao
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4263
  • com.yaotiao:pushcore
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4323

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yaotiao/app_crashrecord/1004

    Filesize

    1KB

    MD5

    78923840b0a65d8c87d99a6f4d0681e3

    SHA1

    f39c0ac6ae8f60e0ec29f3f11c2bb26b7d9993b2

    SHA256

    c7c2db417ff8a42da877741df699ba954411fbee98008f70d2c54c90bbf8cebc

    SHA512

    98eb15383b80c0893cc6263a924d8db9bc24e20537700e8d2da2453c3addbc9a74a899f5836076ec8de5097dc94c2d9d96443fefda50a1ddadd5ff6e0ed83514

  • /data/data/com.yaotiao/app_crashrecord/1004

    Filesize

    229B

    MD5

    0772867c8df270c290543fae16fd2013

    SHA1

    3f17f7c530e775433b33e0bcfe9f54f938cc3a1c

    SHA256

    4c4de35323e29476474b10028a488e9e4c2bb86a8d51817c2ac3e2bcba662ce5

    SHA512

    d33d7b00cf1513b6bc7170d2b0b5e4baea3fe7723163ca1847c2c749127e5e417bfb12404b3b44119d1145af7a18f973bf4aa7272c01de72107d03ba4213e509

  • /data/data/com.yaotiao/app_crashrecord/1004

    Filesize

    220B

    MD5

    bbdc3431873bb29bb4171f622ef74351

    SHA1

    b4b5b8612dd47d65f9f74f94108872e7aa5170d8

    SHA256

    118c623c3c366a12689e655600d0e3cebc3c7fbfdee052d6c2b125aefbc3fdac

    SHA512

    e42b85ff5b396fd2b6f71f6c8c804879a50b4fc7fc7e0f676efbcc9d3fe79b69c71068e37ef7a030de9dd4821ba5eab837fe2e34dda642f943b20f4487cd7cdd

  • /data/data/com.yaotiao/app_crashrecord/1004

    Filesize

    28KB

    MD5

    b354a3798d70ae0a36c4359aac6a5a58

    SHA1

    591bf4d73a4ea2ede29f25db14d53f0a63b0323d

    SHA256

    9e3ca451e62c6db03da38f24710d89f83aaa89b5278cecaee6931edb367c249f

    SHA512

    96a1831defe9bf18c8a1b5b22e7c102da6f63c2e42b30ddc9a428fde7a986d877f0fa848ba8d860946007557146c7d94a87ca9e967dde46e53574b56318eea96

  • /data/data/com.yaotiao/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.yaotiao/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.yaotiao/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    0c69274f86a42f595e551e1befa4e1eb

    SHA1

    eb6b32994c8a41d2568b52fadfef58b17ea0295f

    SHA256

    93b4af1852229b7c89c206462687561998a92d5271465ef138f5aa720b3a99ff

    SHA512

    8696e6c006615cae8cfedbde26ed9794586b527dd6af5269090992695ccd0ea76b0c68ba3b0e9ba112f18918196b6ed15a8c6cb0c5ed539a311e10525eecff19

  • /data/data/com.yaotiao/databases/bugly_db_-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.yaotiao/databases/bugly_db_-wal

    Filesize

    76KB

    MD5

    74ae1ef8f22edb9676fbd3655fb3f50c

    SHA1

    698a745e2df281d004ab8da9c9f0e8d6c4775afe

    SHA256

    77a45668ead6506cc6349722cba3d00ba417393cdbf3a84b7a7b063a59d8084a

    SHA512

    2c1f5af5839f8458762a9e4d7fbdaa71dc44750d8928f1ea33ad62c241e40b9240e813f58c44d7bbe3f09286f0b2edf1a2db175e7516cfcb3817f436ee4a5c60

  • /data/data/com.yaotiao/databases/bugly_db_-wal

    Filesize

    68KB

    MD5

    e06e241dc8462d6518d038bf847c870f

    SHA1

    3bfd429301efb3bd3230bc871b85246da0e5705d

    SHA256

    aebdc5a2ce9b0a062108567fc6194dd3122983c5cd3628d402c7caa941e516b8

    SHA512

    fa6683e736ea178ddf75094c8680adfa91ab353fa2996e4fd1f078637631536511a9029aea916a57cdbe4f5f7016b0fa95eb6f37002285647d917fb5e9679fc6

  • /data/data/com.yaotiao/files/jpush_stat_history_pushcore/e9da695133f1232a70c9fa57/active_user/nowrap/30489551-4794-4af0-864f-dfd2ecbd574a

    Filesize

    159B

    MD5

    817b0ea15ce109ce7f6ccbe032d2ff0d

    SHA1

    31052c26f451398631ff9740367b263a5b0bd02c

    SHA256

    6d60848188c4874416db474262520d2980ada40b494b7177f6b12772652db8ea

    SHA512

    f2c00c292dcdd9783ed718486f07acfb0a16dfc21cdddee1b8e892bdf58c74c4609ea8a1efc5baee62b7cd953ac1ace3536103b9ca1da210daea463d823055f8

  • /data/data/com.yaotiao/files/jpush_stat_history_pushcore/e9da695133f1232a70c9fa57/normal/nowrap/3d556581-8d67-4bf8-bfa5-2230a53510c4

    Filesize

    202B

    MD5

    bf1fb8ebddbb884ba780d2a2651dbc07

    SHA1

    a28f35c7bd425c41185f8b26047b540240904eb5

    SHA256

    104c8eda2ece744686fa02a2b19ccfda59023c0c85ab7f9a9903dbfabb3e8a51

    SHA512

    da95485bcc3c1f98daf1c82df8058170da3ed71b20ea155ff7981827192ee6463172fd0dfc139bf413d52c061bc640885b5d868f6deacc58babb2fd1d388063c

  • /storage/emulated/0/Android/data/com.yaotiao/files/tbslog/tbslog.txt

    Filesize

    1KB

    MD5

    1c6b3f2f429ff5cc406138c1c9d84e05

    SHA1

    a997d68305f35c8a282610d1e75133473a6de2fa

    SHA256

    09eba00401337569815af2f60dcca4cb6b7c14e0794a2ba54caf4c72a1d191c3

    SHA512

    d3566321adfcb2f9579c6f0142f198713550f1f0afe5a54f636964f151805a61f40a062a7b4d5b6253e9a19a1d542555e0c55a52e9519269bc00d5989243bbc5

  • /storage/emulated/0/Android/data/com.yaotiao/files/tbslog/tbslog.txt

    Filesize

    8KB

    MD5

    e012e5611c5b1b47e63d0a635efe5ea0

    SHA1

    ee81eb6b1c7361d024b7b54fc288a447c3d6913b

    SHA256

    ca65fa80c1230459594b0287aeeeab58a784d7fb86da235d5c41dea767b32afb

    SHA512

    392ed6c06c8a4d72c432b637a340ec5afa345bcfaa554633e46a6c7f97bf246806f6089b0983bce8b07a8fa8a1be9b3b7abf6502d89b5f0439d70d043bde3416

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    dec79ae040c3365133823432a538861f

    SHA1

    cdf517f4498efa44ab1d9a5429f65b9cde2dec93

    SHA256

    4f43fb9ee150fbc0ec7781bac1e098a0e9e4ffb8b51f6cc3b3718f7748ddb4b9

    SHA512

    3927a5ded7dd6c8d805890fe903dcbd7d27a124fcf623fbcc731270ff9dc2532a7a6a090bead9f04db94efe8485bb48a44134f898c89044f522318733ca4ba99