Analysis

  • max time kernel
    2613854s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 19:18

General

  • Target

    75b11074bb0d785fe16100cd229282ab025fd098c594b3bd080c8546c1de1059.apk

  • Size

    29.7MB

  • MD5

    f517840371d9ba836772b71fbbbbd08b

  • SHA1

    68f2770ac5b9a2b022b9fa0d66c0786d4d103c52

  • SHA256

    75b11074bb0d785fe16100cd229282ab025fd098c594b3bd080c8546c1de1059

  • SHA512

    9a21a13f8c1c6b2deb0acebf920d06e5ee93bd801cf7818920ca9cb778d3832f7f99fe4f1c9c7938a9d8502a0ba1b207f69786fc47b3d0eeb78f2872a8be5a46

  • SSDEEP

    786432:IQlkumBzdqidXNk4+Xxj3tR7eVivHW4FHerNsbd2uvlItm:IQlkum7bXN7KxjdRA14Re4vll

Score
5/10

Malware Config

Signatures

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • io.dushu.fandengreader
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4505

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db

    Filesize

    36KB

    MD5

    f1abc67cc72bf5fe66779fa5dd1dfeac

    SHA1

    660f6d1cffa2bf57ec29105e40d08ab103cf18ad

    SHA256

    a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a

    SHA512

    dfbe97f3c1f3a3ebd63fc5bcee1b1dd1b91dfe01ac95af8fe897f44079e852421fa0c4cf038da6e43264d50f3e612ddc2be9aa17bf47ef604ca428fafe0858de

  • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    bd78d643abf35452f3c99d873f506edf

    SHA1

    cb3324b0f6fe913ffe457fe7cb61933ed34a1d2d

    SHA256

    c21a57d3edb698645e47537be294687bae239fe10dfa5fec4d0b6a483fda4fc7

    SHA512

    0ac57d77e2ccc4fef2e19021dbd425799268eef50114cac50002391cfc05df5861d7c5d13a1197646edc4b903babab0a3a45ede703b637a2578883b1380dd4b9

  • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    e2432b714e77d937a06535413039d070

    SHA1

    6141c6513da320fe7b55e5f5aaff626312c8b5ab

    SHA256

    333563d58c69f5354fd52dec5aad47420b7252ecb2970f883f94a0d4fa47bec9

    SHA512

    29003246d56436a5ef32a43d8744928c84b7c6803f2b295f2d894fdbdff949dbdb695ef31b93dbe0f9f4d5d199a8752ea3ecf71dc01cf7f52a5497a4a16ccc05

  • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    e6bcffc1b3737f42f4edbff34055cf5a

    SHA1

    49d0e08f4c2f89c98feb04f1c7352b156f10e459

    SHA256

    2453972fefe7361bb01a40f6018e6721d627f033bb27e157fd99a062ad7fade1

    SHA512

    253dbe87d71a6f3559c18edc5b00019c02aadd883e22d673463555075ea273d872eb3fe9a39ad616193eeb3fd2367a96fb9d644dac1472ae9ccac80b1ff9e426

  • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

    Filesize

    512B

    MD5

    b15c433598e5718fd8dea9a68ad98152

    SHA1

    42c5a6590f4c5829316377d84ab5bfd49ab0be7b

    SHA256

    7d094cf6e95c40de123012dc6ef87dba8ba1b85db2d7e937b8565d5767615bf2

    SHA512

    1c1616d82b40269ce5e1b6866190dea751dcb9521b1a909078adbef9dfd2f2a7cd05e6cadd210933bebb09093576675f430d130cc70fdf701c049cc6b4cd31cb

  • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    f91627b4298019310ca294338cba22a2

    SHA1

    7b80e4de34c928056fdb4915d9ac366534bfd88e

    SHA256

    36a26d13b40c0468b7aed776b351c44f9e14928f86e5271c555b30e88e13c84d

    SHA512

    61ec8853c103e72e644762d89535fc1880f34ae386689d48e144d3ef839d1bfe7f4de3784f807c0209b031b329116b8f48d3d2ace3f1b8a64cd5bb385ff8cec2

  • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

    Filesize

    8KB

    MD5

    72b22699aecae0ee52c11fe6681ef955

    SHA1

    3f731bbf1b44fa58f2037213b97995ff9d83679d

    SHA256

    d7bafead2b1d5745a87b08a180fece8a49da10b49ec5be19f838e5051ea41fe1

    SHA512

    acea93bf9fa6178b44ba19e59914097f110f9fe9ff58083a639f1acc7bd39a08447728897cf6f510e9013f6e04cc6034784c42d1db8f0a49889869a9201faf6c

  • /data/user/0/io.dushu.fandengreader/databases/dushu-db-journal

    Filesize

    16KB

    MD5

    22a90b8100baad115c2a5fd8dd65c1db

    SHA1

    9bed21ed49ecce633363f060846f6def669206d1

    SHA256

    74084367218737299e6332afe4c0aedbdcb066214c0e214ba44968b74c6ef9b8

    SHA512

    3eff68083ab98dd383ee85868aff45f5d2acf533dbc9379815cd788f14c69ea7b84a5d5f1751ba92e2f82ba623e62b2e4bc6b005bf995e215a3597e2e7553fa1

  • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db

    Filesize

    28KB

    MD5

    76898ce442aa431d20acff2606bb100e

    SHA1

    5d48d235dcdcebb2b86ed0945882f534d0d162f8

    SHA256

    fe717f75bc43ebf8d5d482fdacf900c04dfa00cb16a8b26888b5d0d3219b8693

    SHA512

    4310c1f23ef7ad3bff26db2384506a8ff83d2b74cb8f7862111c746e41723718357dabec2106df62fb6280fde0d9eec87fb1110977484b84168aef2b258f04ef

  • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

    Filesize

    512B

    MD5

    574bdbae477eaf1baa07639a115b56cb

    SHA1

    a02820cc70e03caadb550c2353ba34fec53f47d1

    SHA256

    33b75592fa75adda83133babb7d562661593561fb8a7d5052f63f2e64e6214ad

    SHA512

    651b43b488e45ea1444564e76e474cb1ddda91bcbb3dbad6e9f4593749408d1002fcefb9e92e87f2999f49ce72d1cdf53dde5ebbf84984dae1c4b59bdecde246

  • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

    Filesize

    8KB

    MD5

    dc5132c98fa77132233df57018dfc2b7

    SHA1

    f3a65b3c2df2b2b479914dbd21c8cf9bc80eafc1

    SHA256

    4408aaf3bd3b62e8b1292870e3275a0bfc992c60fe6166bfcd80313acae5f14d

    SHA512

    ad9f28416ebae0f748428ee65bcf2bb3b790d9dfaf66490d3473c6cb60f2becac6abf61ebbc29d3da87a887b7663dd39e644d1a822bec6044272a85144564611

  • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

    Filesize

    8KB

    MD5

    e57820478c4a2b9608cf5ac0d39aa04f

    SHA1

    34e25342c375d922cada949d29526fa6442b6047

    SHA256

    01259f59cab8a476440082631ac40769f095b24f46f70e0d1fb6256826c2c76c

    SHA512

    067c18c0de8a488f452e7082c8c4c8085de9d1ab324f995e28728282e8f1736d0acc6b595dc0f1722ead8ceda008e86f5f456795f343613adfb98ce492a50dc1

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    600e2c6be267b8c10575ea016fe4efe9

    SHA1

    4556d0b4648b154e6dc8b595f81964b9400ad867

    SHA256

    03d0fe2396cdd4cc034d174f348e1ff08acfffd469907c5fedac1343815a9fcc

    SHA512

    b17c504ce1b13d27785e15c689788acbeca10dbf9fc2c63d51c633992bd77ff51bbc540f69d7772618e8ac36af8d27387661c4901a8a86949e65eb38e4fa29c1

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    48a6ed9d7fb14278ea97f1dbb57bf7dd

    SHA1

    a7cdbcc70a83aefc888ff355627e41aa0443f2eb

    SHA256

    12329fdb1d928392e1ae6de62abf6f6e6032aba4904c8bbdcb68a60a5e280ad4

    SHA512

    c01e77430b488cb8457fcd419bc99b8ebe76fd0ec2ba89024dfd18038d12ff7b8be70126e3bea16d73119febc6973c8af94cf19cfa4c81a15bf264b3104783a5