Analysis

  • max time kernel
    2650259s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:47

General

  • Target

    6ca071500fd3b7313c0af173507152e0ce8669baef78f606495626456ce7e76b.apk

  • Size

    26.0MB

  • MD5

    4a64eadda75a4f94ff775e3873c566a4

  • SHA1

    3cf2f3dc39190d25d0d783ef62ab5f8488c2d596

  • SHA256

    6ca071500fd3b7313c0af173507152e0ce8669baef78f606495626456ce7e76b

  • SHA512

    4521972a6f536de6ba1285b1a3a292358d493da63238c5c2d3a7f2a41cea580f1242367de7ed0fd93bbf87fb4b5b58514b3c2e74754b2129184343bb7afa8729

  • SSDEEP

    786432:6PXxomyQri3kNmfyG3snkE4eHSF3ZKKOITZP+H0E:6PBNyQGo/G3sFmV0KXV+UE

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.sg.hlw.baidu
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4245

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.sg.hlw.baidu/files/TDtcagent.db

    Filesize

    32KB

    MD5

    9553e163a4651c7439ed37d72d6e2601

    SHA1

    4eb2591741511c48303922ebd9043d3a816ea4eb

    SHA256

    89bc5c7f63176150953aeeacd1d82af33323e39574d8421d97dc79b9e0d46d3e

    SHA512

    07cc5cb1e858f940aae3937f5bafea3607e6b98473b69c0e81d3919146105d6ec4e361c51cb3886f70b44135ae15fce4365b24c7ec33b613645efe8aa90ae8f1

  • /data/data/com.sg.hlw.baidu/files/TDtcagent.db-journal

    Filesize

    512B

    MD5

    f9cac12a7900b1d230698ab46220ebd1

    SHA1

    de804b4a8b5013bf3834ae0b779fd8013f6d7141

    SHA256

    0adf0c3d3e64524c0b7237c2c650c8657b36086b3cc6dc6c5a9c2193d62663a7

    SHA512

    9488844aa86642eb50683b10405112883a0a39cd67d2d2318f465321011245c3bd18e03c441f23795da729021e5ed1ad1dcdd1e7e1e342d258ce53852b88e50b

  • /data/data/com.sg.hlw.baidu/files/TDtcagent.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.sg.hlw.baidu/files/TDtcagent.db-wal

    Filesize

    80KB

    MD5

    3e835293867e74a7ef1160de163bb19c

    SHA1

    7da78fed77a1236de7d4823e14a35de81fc92324

    SHA256

    359d768ebb9b814f47695f1157e1a414990693f13e730e5d21e6e258ec13b1a7

    SHA512

    19b271864edc09fbcee70f0553e5dc1b76e93e305cae8f94f2e868b35d9ac7894b1c99e0998b9235dd42f3ef88f44fd1a32f23b890fa4557ba5a9d0e792062bd

  • /data/data/com.sg.hlw.baidu/files/talkingdata_app_process_preferences_file

    Filesize

    21B

    MD5

    676a2d96871579cb7f2efae3fbd3a8d8

    SHA1

    bcf25fd8188ff2f041d2bb4a455a41db510e7ed2

    SHA256

    9e98f17df54b426a3feeaed222c5b6555ecc356bfa6f185e4be074ea32ad227c

    SHA512

    d2c97af04c139ca2307da1885e3689f8f2830d250a4ad7b0a642c22bfc70523b47c179a4003ac1f6348d5c986e04fe4d650fa156573b4264dc980f5839f6f14f