859222346717bc615528167de9fa3cb80390dbe34d33fa0ffa80886c7aa38dd9

Analysis

max time kernel
2745418s
max time network
157s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 20:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

859222346717bc615528167de9fa3cb80390dbe34d33fa0ffa80886c7aa38dd9.apk
Size

6.8MB
MD5

648377cc656a90d14d6171b23399cdfc
SHA1

159144d0fadb3da5c7448c7eeaa2044726b0225f
SHA256

859222346717bc615528167de9fa3cb80390dbe34d33fa0ffa80886c7aa38dd9
SHA512

3330007e91b3c246831e8bcd6910f59764504a14c55b1d646cd4492ba22a74d80ad17c8f4130eb8e8b83e435692fd1872d6d7cd098e15dfa25e6dd0192c67f1f
SSDEEP

196608:rVm735rRZbt9ngVl6snySF6VHSBm8HqBFFsu+GmLA+d:rY735fD4HnyAkF9PmLLd

Score

6^/10

Malware Config

Signatures

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.muzhiwan.market:bdservice_v1

com.muzhiwan.market
1⤵
PID:4238

com.muzhiwan.market:bdservice_v1
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4270

com.muzhiwan.market:pc
1⤵
PID:4294

com.muzhiwan.market:mzwlogservice
1⤵
PID:4346

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

Filesize
32KB

MD5
fe2df3e1d63963d77c4998e448c95dc2

SHA1
21c18ef75163effa50c10369f6bf36062b153208

SHA256
19e3c0f8e90741940447b958696deca9a026eb686873cff1bd07a459040e3b54

SHA512
f14714dce748e8d4aee2f404c2b1209875de2757dd1310dc31f1fb866547a09d997201172a7ee16d872f1aed821062826c800a29e8fe0a1b27185b92c1677dca

Download Submit
/data/data/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-wal

Filesize
36KB

MD5
d0fb67562f76af76ba822ce6a76f1dc6

SHA1
a8b4c2c8637a91addbf94856dfd6481fa6b56c08

SHA256
988c617299beedb4b1aafbd19f7e2da2409b9eb14072aaaa0976caeb2e0ff51f

SHA512
790886c6ae2bb8dbf812e25f8291e7271bec9278913d82abf68bb8740e86c3fefe4a3419a54659c76e22513e851c78b38fb668d6262b0fa1ef713e73227bd552

Download Submit
/data/data/com.muzhiwan.market/files/mobclick_agent_cached_com.muzhiwan.market

Filesize
198B

MD5
5bd17fd8411a9baa26504123d4d10bbb

SHA1
3fb773a4c0e22266504c13383566eb77bf6c74af

SHA256
e61c28dc33c2e0b5951bc4ae1cb95e851bd16206bf477dabfe642c0432d75a8e

SHA512
82db3c8009860fa84f498267a54bf8a09c3131a31321182c24cc519626370d173742801c9c7695fc6a004ff63dd267392b490d6fbb59886d8b5881656ed45d4e

Download Submit
/storage/emulated/0/.SystemService/26F95F83A003D2AE8FAAC414AD4E380B/uid

Filesize
34B

MD5
9271895893dbdadd1f054640b625ae37

SHA1
f0263a846f1f17cdb8efa6fe1e43c43a6c90c539

SHA256
95985bf9f84e7e59f7fa0ada1b6e53f87cbd42349f2a2ff8aa1f6f294bd83eab

SHA512
d10e039d9089dad3a4f5a694584b677ef8d84dfe6898597cf3e24b32b6e62c9f99dab18a1f4b5fab59f7ba8e8ee03be3bbcb2c0d642ae6d8e3c67e74e7388975

Download Submit
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db

Filesize
28KB

MD5
cf5eebbb59097dce7304560fa6ce732c

SHA1
e52639ac23f3a9a4cd6280e51b908065bbb44149

SHA256
5e6948cb51b840a665ccae4b3a9c358b9411316e1a066a96d45650da8504f84b

SHA512
38133d847df0336748be4aa0bfa3a68264c408e77a41b2a0682fb91f23ba935dc9fefb5988764a9b5f782e9ca5e7d122c3c36b033fd9916431045bfd87f36d46

Download Submit
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-journal

Filesize
32KB

MD5
5b328214e8cd4c79b52b139529d04c65

SHA1
31a71cbb24e5905296c719bf3115eab3ea1d4cca

SHA256
e101cf138350042dfe00bce4c5f0263d66aed0e3ee06c8c8c7cc0a261237e1d5

SHA512
04cf0db6beb024e7382e012a6358ab68ea394751ab097c752efc7baaddbe285c6dfe6d2b818a1884f1adddde28e8a104c6c56c7c461ac5b04802931ba45e6421

Download Submit
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-wal

Filesize
56KB

MD5
ed9c71581994118a8b3f2facab860a2b

SHA1
9feb043ac61ab883eb7f834adaaaf6ca70e0a793

SHA256
767c42b0507f2c6a28cce07ffb08b0b3033015f4c921a23fe7dbcfa14336462f

SHA512
29e9d86f1e51def95e5acd4dd69ec8fac21df57b38391b520e00bfb2b1cda9962b3a68d86489ce4e141002c3bf7c3efca8145ec200936ad992532f56723a7a49

Download Submit
/storage/emulated/0/muzhiwan/market/db/mzw_local.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/storage/emulated/0/muzhiwan/market/db/mzw_local.db-journal

Filesize
512B

MD5
a8cdc08ac95f8fed27bfd79dbbd8626e

SHA1
606c834e1ae1e1edf6b4b89c33c41990073e3cd0

SHA256
df70e639acdf113b9937cf4fab84f6753a9de1f8a5718cb6ab796e67a2e2d8c3

SHA512
9b6377d7e8fc217c05b9546310fe61e62848fc5eac1aa09bf2e3696979bd9526735e5d772f9b46ca9e04195d6bf4a353a8f6cc2f4220035c7c76663dd375e1f1

Download Submit
/storage/emulated/0/muzhiwan/market/db/mzw_local.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/storage/emulated/0/muzhiwan/market/db/mzw_local.db-wal

Filesize
32KB

MD5
e939263576f7bd13338c00efc35a9e59

SHA1
163ba2ee68435f9bca34527e1a03ae8c6a98ad75

SHA256
65b876da30ebfe7b6c2ebffc2bf9a84c59916eddfe3ec0f00a62b664489598f2

SHA512
6d1f6f81d3d88871d504dda16cc7198b50470f0a98849062ab28b3dbcb21a98b425b39665c9e0cff549d6122420a6b068884db22b62934e54751377c824dafa5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads