Analysis

  • max time kernel
    2613854s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 19:18

General

  • Target

    75b11074bb0d785fe16100cd229282ab025fd098c594b3bd080c8546c1de1059.apk

  • Size

    29.7MB

  • MD5

    f517840371d9ba836772b71fbbbbd08b

  • SHA1

    68f2770ac5b9a2b022b9fa0d66c0786d4d103c52

  • SHA256

    75b11074bb0d785fe16100cd229282ab025fd098c594b3bd080c8546c1de1059

  • SHA512

    9a21a13f8c1c6b2deb0acebf920d06e5ee93bd801cf7818920ca9cb778d3832f7f99fe4f1c9c7938a9d8502a0ba1b207f69786fc47b3d0eeb78f2872a8be5a46

  • SSDEEP

    786432:IQlkumBzdqidXNk4+Xxj3tR7eVivHW4FHerNsbd2uvlItm:IQlkum7bXN7KxjdRA14Re4vll

Score
5/10

Malware Config

Signatures

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • io.dushu.fandengreader
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4505

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db

          Filesize

          36KB

          MD5

          f1abc67cc72bf5fe66779fa5dd1dfeac

          SHA1

          660f6d1cffa2bf57ec29105e40d08ab103cf18ad

          SHA256

          a953ef381606a6d98d98f3278e94fc1d5b58a0778f8ea3e305111586b759c14a

          SHA512

          dfbe97f3c1f3a3ebd63fc5bcee1b1dd1b91dfe01ac95af8fe897f44079e852421fa0c4cf038da6e43264d50f3e612ddc2be9aa17bf47ef604ca428fafe0858de

        • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

          Filesize

          512B

          MD5

          bd78d643abf35452f3c99d873f506edf

          SHA1

          cb3324b0f6fe913ffe457fe7cb61933ed34a1d2d

          SHA256

          c21a57d3edb698645e47537be294687bae239fe10dfa5fec4d0b6a483fda4fc7

          SHA512

          0ac57d77e2ccc4fef2e19021dbd425799268eef50114cac50002391cfc05df5861d7c5d13a1197646edc4b903babab0a3a45ede703b637a2578883b1380dd4b9

        • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

          Filesize

          8KB

          MD5

          e2432b714e77d937a06535413039d070

          SHA1

          6141c6513da320fe7b55e5f5aaff626312c8b5ab

          SHA256

          333563d58c69f5354fd52dec5aad47420b7252ecb2970f883f94a0d4fa47bec9

          SHA512

          29003246d56436a5ef32a43d8744928c84b7c6803f2b295f2d894fdbdff949dbdb695ef31b93dbe0f9f4d5d199a8752ea3ecf71dc01cf7f52a5497a4a16ccc05

        • /data/user/0/io.dushu.fandengreader/databases/MessageStore.db-journal

          Filesize

          8KB

          MD5

          e6bcffc1b3737f42f4edbff34055cf5a

          SHA1

          49d0e08f4c2f89c98feb04f1c7352b156f10e459

          SHA256

          2453972fefe7361bb01a40f6018e6721d627f033bb27e157fd99a062ad7fade1

          SHA512

          253dbe87d71a6f3559c18edc5b00019c02aadd883e22d673463555075ea273d872eb3fe9a39ad616193eeb3fd2367a96fb9d644dac1472ae9ccac80b1ff9e426

        • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db

          Filesize

          12KB

          MD5

          171aedf968e17a2744d2585715606cb9

          SHA1

          bbeddeb3b89fcf809619c35b4a318a80e7d5b029

          SHA256

          d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

          SHA512

          78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

        • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

          Filesize

          512B

          MD5

          b15c433598e5718fd8dea9a68ad98152

          SHA1

          42c5a6590f4c5829316377d84ab5bfd49ab0be7b

          SHA256

          7d094cf6e95c40de123012dc6ef87dba8ba1b85db2d7e937b8565d5767615bf2

          SHA512

          1c1616d82b40269ce5e1b6866190dea751dcb9521b1a909078adbef9dfd2f2a7cd05e6cadd210933bebb09093576675f430d130cc70fdf701c049cc6b4cd31cb

        • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

          Filesize

          8KB

          MD5

          f91627b4298019310ca294338cba22a2

          SHA1

          7b80e4de34c928056fdb4915d9ac366534bfd88e

          SHA256

          36a26d13b40c0468b7aed776b351c44f9e14928f86e5271c555b30e88e13c84d

          SHA512

          61ec8853c103e72e644762d89535fc1880f34ae386689d48e144d3ef839d1bfe7f4de3784f807c0209b031b329116b8f48d3d2ace3f1b8a64cd5bb385ff8cec2

        • /data/user/0/io.dushu.fandengreader/databases/MsgLogStore.db-journal

          Filesize

          8KB

          MD5

          72b22699aecae0ee52c11fe6681ef955

          SHA1

          3f731bbf1b44fa58f2037213b97995ff9d83679d

          SHA256

          d7bafead2b1d5745a87b08a180fece8a49da10b49ec5be19f838e5051ea41fe1

          SHA512

          acea93bf9fa6178b44ba19e59914097f110f9fe9ff58083a639f1acc7bd39a08447728897cf6f510e9013f6e04cc6034784c42d1db8f0a49889869a9201faf6c

        • /data/user/0/io.dushu.fandengreader/databases/dushu-db-journal

          Filesize

          16KB

          MD5

          22a90b8100baad115c2a5fd8dd65c1db

          SHA1

          9bed21ed49ecce633363f060846f6def669206d1

          SHA256

          74084367218737299e6332afe4c0aedbdcb066214c0e214ba44968b74c6ef9b8

          SHA512

          3eff68083ab98dd383ee85868aff45f5d2acf533dbc9379815cd788f14c69ea7b84a5d5f1751ba92e2f82ba623e62b2e4bc6b005bf995e215a3597e2e7553fa1

        • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db

          Filesize

          28KB

          MD5

          76898ce442aa431d20acff2606bb100e

          SHA1

          5d48d235dcdcebb2b86ed0945882f534d0d162f8

          SHA256

          fe717f75bc43ebf8d5d482fdacf900c04dfa00cb16a8b26888b5d0d3219b8693

          SHA512

          4310c1f23ef7ad3bff26db2384506a8ff83d2b74cb8f7862111c746e41723718357dabec2106df62fb6280fde0d9eec87fb1110977484b84168aef2b258f04ef

        • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

          Filesize

          512B

          MD5

          574bdbae477eaf1baa07639a115b56cb

          SHA1

          a02820cc70e03caadb550c2353ba34fec53f47d1

          SHA256

          33b75592fa75adda83133babb7d562661593561fb8a7d5052f63f2e64e6214ad

          SHA512

          651b43b488e45ea1444564e76e474cb1ddda91bcbb3dbad6e9f4593749408d1002fcefb9e92e87f2999f49ce72d1cdf53dde5ebbf84984dae1c4b59bdecde246

        • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

          Filesize

          8KB

          MD5

          dc5132c98fa77132233df57018dfc2b7

          SHA1

          f3a65b3c2df2b2b479914dbd21c8cf9bc80eafc1

          SHA256

          4408aaf3bd3b62e8b1292870e3275a0bfc992c60fe6166bfcd80313acae5f14d

          SHA512

          ad9f28416ebae0f748428ee65bcf2bb3b790d9dfaf66490d3473c6cb60f2becac6abf61ebbc29d3da87a887b7663dd39e644d1a822bec6044272a85144564611

        • /data/user/0/io.dushu.fandengreader/databases/fandeng.ubt.db-journal

          Filesize

          8KB

          MD5

          e57820478c4a2b9608cf5ac0d39aa04f

          SHA1

          34e25342c375d922cada949d29526fa6442b6047

          SHA256

          01259f59cab8a476440082631ac40769f095b24f46f70e0d1fb6256826c2c76c

          SHA512

          067c18c0de8a488f452e7082c8c4c8085de9d1ab324f995e28728282e8f1736d0acc6b595dc0f1722ead8ceda008e86f5f456795f343613adfb98ce492a50dc1

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          600e2c6be267b8c10575ea016fe4efe9

          SHA1

          4556d0b4648b154e6dc8b595f81964b9400ad867

          SHA256

          03d0fe2396cdd4cc034d174f348e1ff08acfffd469907c5fedac1343815a9fcc

          SHA512

          b17c504ce1b13d27785e15c689788acbeca10dbf9fc2c63d51c633992bd77ff51bbc540f69d7772618e8ac36af8d27387661c4901a8a86949e65eb38e4fa29c1

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          48a6ed9d7fb14278ea97f1dbb57bf7dd

          SHA1

          a7cdbcc70a83aefc888ff355627e41aa0443f2eb

          SHA256

          12329fdb1d928392e1ae6de62abf6f6e6032aba4904c8bbdcb68a60a5e280ad4

          SHA512

          c01e77430b488cb8457fcd419bc99b8ebe76fd0ec2ba89024dfd18038d12ff7b8be70126e3bea16d73119febc6973c8af94cf19cfa4c81a15bf264b3104783a5