Overview

overview

6

Static

static

6

6b345dd797...47.apk

android-9-x86

4

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Analysis

  • max time kernel
    2646767s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6b345dd797092862bfcf791338cfffd07b7141f62a89f23dbaca242c18a67d47.apk

  • Size

    15.5MB

  • MD5

    7b9830fa9609a894588087e5b95ad280

  • SHA1

    c2cee651103c574223dc6b0bf138c38dd76aa18a

  • SHA256

    6b345dd797092862bfcf791338cfffd07b7141f62a89f23dbaca242c18a67d47

  • SHA512

    3768ade46ee2566cda10d6cbab26c31f3b41350567db6845215df75ba06de91947864343892761965d7cc4e84ef1208714fd0144ce5df2611c37582a25953611

  • SSDEEP

    393216:g6LEp8QiSl4pYxUZy0Y4fhFWZ4fhFWtwZ7MVq8M4fhFWv:g6Y3iSlAXhP5FWK5FWto7UX5FWv

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tianyan.driver
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4266
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4303
      • chmod 700 /data/user/0/com.tianyan.driver/tx_shell/libshellx-2.9.1.2.so
        2⤵
          PID:4326
        • getprop ro.board.platform
          2⤵
            PID:4303
          • /system/bin/sh -c type su
            2⤵
              PID:4352

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.tianyan.driver/databases/bugly_db_legu
            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            Download Submit

          • /data/data/com.tianyan.driver/databases/bugly_db_legu-journal
            Filesize

            512B

            MD5

            55315c9ce3d8f587b74020341fcd00ce

            SHA1

            9ea39fec9c62f0f1b81dde7655980c34fa0b8c76

            SHA256

            d01e82c922cc19b14a3132340ac88c5df531282a6733da247e5ad573504d7bae

            SHA512

            c213d83b508a2aec1ecebdfe9aab0677df16bb641a187e88b6f2f094d4c1b748c264909e04b65d4828afe6d7e6a35f483908018a4d7a84d2ebed17cc4d364189

            Download Submit

          • /data/data/com.tianyan.driver/databases/bugly_db_legu-shm
            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

            Download Submit

          • /data/data/com.tianyan.driver/databases/bugly_db_legu-wal
            Filesize

            16KB

            MD5

            9caebe3698fc81160271a974a2b34371

            SHA1

            97359b485393a679067742fc307e180e8a15f42b

            SHA256

            cca8d508cae9b7dbd9858baa5673d910693f6d9a444a5980ab0aa79fb2648335

            SHA512

            7ef082b29681580d4e996fd6eb98e4c3e211c377ba4736a1012d1e50adc5000a838897932eb9660fc3e7918e31b17bea2d06c8fd70366f21098d60d3f3c6920e

            Download Submit