Analysis

  • max time kernel
    2639961s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23-12-2023 20:07

General

  • Target

    859222346717bc615528167de9fa3cb80390dbe34d33fa0ffa80886c7aa38dd9.apk

  • Size

    6.8MB

  • MD5

    648377cc656a90d14d6171b23399cdfc

  • SHA1

    159144d0fadb3da5c7448c7eeaa2044726b0225f

  • SHA256

    859222346717bc615528167de9fa3cb80390dbe34d33fa0ffa80886c7aa38dd9

  • SHA512

    3330007e91b3c246831e8bcd6910f59764504a14c55b1d646cd4492ba22a74d80ad17c8f4130eb8e8b83e435692fd1872d6d7cd098e15dfa25e6dd0192c67f1f

  • SSDEEP

    196608:rVm735rRZbt9ngVl6snySF6VHSBm8HqBFFsu+GmLA+d:rY735fD4HnyAkF9PmLLd

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.muzhiwan.market
    1⤵
      PID:4529
    • com.muzhiwan.market:pc
      1⤵
        PID:4599
      • com.muzhiwan.market:bdservice_v1
        1⤵
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4569
      • com.muzhiwan.market:mzwlogservice
        1⤵
          PID:4660

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.muzhiwan.market/data/mzw.d

          Filesize

          4KB

          MD5

          54a4aa9fafa7756a4e0039ae6169612b

          SHA1

          e181d8ac70c3c8c7c33ce4d19d8ce84bcaffa57a

          SHA256

          2423f51ea7148728735df3db5db1aae92d5adb77c24a082b570a177547f8c787

          SHA512

          8340979dd6f567137a225ab504d1630fc064bc3419ef954ed36d8864b51428829c3135c7089345461593e6e2771c08ddd2a677f443fb5d6308ffc10338aeb269

        • /data/data/com.muzhiwan.market/data/mzw.g

          Filesize

          9KB

          MD5

          5f3ef1a776b19de8d960443b86be9a91

          SHA1

          39229124d8321d505cde850f2bb41a470fd3afff

          SHA256

          5f85f696049f6739e5217143874333240662bf9c71cecdbe6c855834b09f5a6e

          SHA512

          21a04d044024746c5d04e61ac26ba7f68324eba00b614348b602389e036dc85236cfdee30b4e1091d2392630382c7aaa18fd89fd78488054d94275d71c717ac3

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          28KB

          MD5

          dbab2d42bee6e49f7950a1bb1921015f

          SHA1

          97a19cd785237b33b2c8d680218ec0192c6326c7

          SHA256

          00e335fbd6c782e656595332e5dc74471e568444b33cfd6f41aee0ea4b4d4ce8

          SHA512

          12cefbbfd1e401435b21a407df5b5639d3aa3ea12554e9c322ecf87d34df02cb09582ff13d90e1d3157acebc98f3a3850ef6092a7018a6bcd96605a9a15b0527

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          36KB

          MD5

          bf77a854bc34c13f507cb98d209011b0

          SHA1

          61b043b3c610a34fad15bacc11e8e8607498ebe6

          SHA256

          27041c80f2544c14567974021642ea2fe6706e9588f0c13cf6a2b61b990cb587

          SHA512

          803ad4f590d6e8b1cf797e937a7aa7abc8d9d4e6ddac3ef0072b32a8ababfbca8f4da794ddee39ca0035695ec9485e055f60f1c502223df4a6cdae9e098891c0

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          20KB

          MD5

          b450e5df1dbcf4a289d89728e7e9774c

          SHA1

          c0caacd58c47423d561aef702ffb39ce44f317a9

          SHA256

          f390372f479d4d3b2462e1c78ff263f8b2d36c4f738f50b40a909af713d11ab2

          SHA512

          217054c88750ecc85515ea01fa75c3b66be1c69c079d0fae292df7fc07d697aaef04bf04c73ae178e30ac6d2871e9ee7c0035428d4be6ee7115ad1b55968458b

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          20KB

          MD5

          b1befe5fc216702977c261eddab74e71

          SHA1

          cef8727f6f50de31cdbea6cf45b1e861e2046241

          SHA256

          accc8cbaa3bb5ea8b56b7fcb48000e3bae7e568f642a0f61c93005301a526d25

          SHA512

          2dfabc85806dd9cf01f4078e140a413025110e544309297a96ae82b43f43cfbcbb5d633710ac354b2e23c4f035b570995265b3332ac78d15d665e748cf2f4c81

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          20KB

          MD5

          7c8e5c04eecec6c87684e8ec36fdab9c

          SHA1

          5c22f84af77103b7d75de6ffb1fb4aa2fbbc8ef1

          SHA256

          86526982af6cf52d90f330973e1d2b56afc72e99b9795ad542c457e23caec909

          SHA512

          2e02083f375ca9ff5ee5255287ad97475c475c2c0e6cfcb5f47c0262d1631d0cb40f835b80fb9e14779e40e683fa39007f919761688b456accad69955f117aeb

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db

          Filesize

          20KB

          MD5

          9f174d5a6befdec7f81650052d68a39b

          SHA1

          7e984de7f082a8c517f086d2506d135e2ed0d739

          SHA256

          ab6bddfef389e2aa8e9cfb68e5743debd0f408d0470ac749f23171c2d4f8779f

          SHA512

          b8c1baa543b85112e7b556d5926ac0c2a0a78fcc1d74cd71f03773e61a70d806d34f14822a9e343e94b241367af0224355eecf92d8d33315d37a101621c49353

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          512B

          MD5

          3ab0135c5522e5a32fa29847bea176a8

          SHA1

          b0f658dd549d73b5cc84448763835a37f4eefebe

          SHA256

          5d308bb991db851a84e4a155221548c60e93b8c4003ddaef2da25ff34d1a6d87

          SHA512

          70936951cc52d5b98045cb401b5dda6e1add34be250908b1c011cbb1ef0ae35e8872b118b737e5a0a19b68e836a843fc25943b1c6bf9fc6e22f60308d17a569b

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          8KB

          MD5

          43a9ba08a43924d8bad5ab703bf5d193

          SHA1

          b80459f6530848c23c11595f14c9477814ec3a74

          SHA256

          30b0fce58cab9e3c5ea81108fef8795648ac37b0b2b6cf31e2c906012b175ba2

          SHA512

          57464ad054ab78c4f7168769db474cc10f17a50ef9a16c4342b36125132a50fda6db298bf2004f68781e5bc9f848dcdbf5a6c2569c8368e95e238725cd824cb8

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          8KB

          MD5

          99088ef1e5886277d11d647f605d89d8

          SHA1

          2daa1a7b9c29f7dc9e5bfc8b70148187305fdc69

          SHA256

          ebc40a8a3b67ea0e89dcff3f1cf7ed0b7abbc36a322d3a47743a339d1cc700b6

          SHA512

          16a691e3a2ce0cab95ff968d7617401f910c51f737840eb76dab10354deb911affea01bc47c5a4d2c60fa9af432334f951cbdd7232c55d542b98fc76b5378309

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          16KB

          MD5

          829c4bb8707d6de389181181480816dc

          SHA1

          0d1f69e81d308c7c6a251082c9c8a38b3c67aad8

          SHA256

          a9eb52c8c7eae0b12c46dafae0567b68a825c1cdee66d7ffa8d604f2db6c6fdf

          SHA512

          571be2bbb83ee63ce00062c28869b501086f657fa1bd561f0331f1ca9b94c9a1b290dd7b7ef247be5d0ed59333b55da5c91f10e677791f1bcc6aaf7cbdffe4b0

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          16KB

          MD5

          2f986a24547a755977b119b52fa30ed8

          SHA1

          3edb6becd2ea10df3fbfe5b9bd0bb3c24ea142f8

          SHA256

          b03d691bf607e80d2bc0714c584ae877e62ad2e4e9c6bcb3d1115a6f995860e1

          SHA512

          b4f77ea7d0c61c45fcca2cac57e857582491cd5eb569d4a5882823b63f9c781341c5647daa42b500dc35b295391c8855d6c41746f7890c3016f6a15a99bb9341

        • /data/user/0/com.muzhiwan.market/databases/dataeye_database_26F95F83A003D2AE8FAAC414AD4E380B.db-journal

          Filesize

          12KB

          MD5

          2024fcf760bddb1648ce7392d3b85c96

          SHA1

          2062ddce2539b48bff17e4edd2cb4b50802bb403

          SHA256

          6d1190dd6c731421bd62afdcd584371402e3c315db5c8d7f190a7c799ceb78f0

          SHA512

          2da562c62eedb44876e66738cb7cb524afdd259b3b4d122a07a95c1d5545022203b025b9ce9194928b6f1d9246521785999f8cafd716eee6d3d9eca26e1ac33e

        • /data/user/0/com.muzhiwan.market/databases/mzw_new_downloads.db

          Filesize

          20KB

          MD5

          bdbaf979777820621a8cb747b6bdd6e2

          SHA1

          6d9748c429e57ef73a6ea0253290e3857881bbf8

          SHA256

          d3604974f964ba47be4cb7a303dc6b108dd61e9696660837ee1a54cafb5fd463

          SHA512

          5fc07d66bd5a432dae34a3dadbebc48a28e06bd736b148458ccbbc888bef0330064cf82263d8c6f8a705ed53357f216216aa6d43e817b0ba612157d08f523668

        • /data/user/0/com.muzhiwan.market/databases/mzw_new_downloads.db-journal

          Filesize

          8KB

          MD5

          3bd8b247b7258d7150a9f7272aad0d56

          SHA1

          afba7d8865a1fdb71baad5b02310dc9c37cbbf5d

          SHA256

          a2f3192e253823c12e0b4db4b4a1198d7bb9640fa41269283b29c699d09882e1

          SHA512

          6a80419d12281a37df496d149c2d1c87817af408da2d820779aefe580c8643ad29c71f1e71b494a4f1d4dae6c70fab5ec79d84720787b16064b30ff54f723277

        • /data/user/0/com.muzhiwan.market/databases/mzw_new_downloads.db-journal

          Filesize

          8KB

          MD5

          4f3d13dbb1849c3acf51304f66c18e85

          SHA1

          2b77214dd3fbba8de5011bc4d91fa3206313e27e

          SHA256

          72ba41ef53def4eafa4e1f4c05e287889eb8f457a8701c00e9827d910b42d988

          SHA512

          e92243fe0c9cf9e01125395bd4e1c4132b81cab1504bd0227adb31d6d7e514e1db3014dd7ed15b9aa785b11ec244bdcb46f035c9aa8251ed0b6846f02a75b650

        • /data/user/0/com.muzhiwan.market/databases/mzw_new_downloads.db-journal

          Filesize

          8KB

          MD5

          e683bdbde2d6668c46c584f077e42015

          SHA1

          f64424ed60adca82efd99427d10a241ebaf7ac01

          SHA256

          c30e3f36bfcaa6b24cdcd33d1b5d02bf1a4134660513c3a1e46e722c57377221

          SHA512

          50d036982a2e4ffb7bf377438b667572cabc90240a148f7a79826260b9c4dc369b03c0e721615fc8d614df1905da8bc013503e971370777ffa29f3d2e7cfb498

        • /storage/emulated/0/.SystemService/26F95F83A003D2AE8FAAC414AD4E380B/uid

          Filesize

          34B

          MD5

          6edae9d3660abde7fe3049da72836962

          SHA1

          c63ccf7d61e1cd2fa93be63ef082db0aa2affa8b

          SHA256

          eb73326c18572c61b2d1025d27a08b23a5d5ddc8ba98ae20bf5b9187901578d8

          SHA512

          42af6356ab9a67616d47b92511a2b302f4828a4ab4491b7ceb2b03ee4f87ba88c21bcd165f504f98b14e8663001a4b75f4467fa119d29a02dd5ed54e03677715

        • /storage/emulated/0/MzwDownloads/datas/mzw_new_downloads.db-journal

          Filesize

          8KB

          MD5

          fd70e2181e3b821e7b5af559859c1672

          SHA1

          15e44ed3c742a9ee302a723fba1982fdc369b2b3

          SHA256

          ffac1f5018c8e087a0f9742bad383a472551cba2907d7d494a1a8b80184ab340

          SHA512

          39efad1735e07834c2d5cdca87aa90bbf777697ba37d56d34f45e7ac3b83e93a24cfe15cfefdbd981186fa3bec0d3be61ac570b51715406242ff2809c3cda4a7

        • /storage/emulated/0/MzwDownloads/datas/mzw_new_downloads.db-journal

          Filesize

          8KB

          MD5

          12c4593d0761dc998d0003e314f2774f

          SHA1

          49c8793d22516b3df6a492c69c44004e5c8243af

          SHA256

          396d91e79e89971e95dd6be61c647e561b396c2ee7ce0d37ca69c7c3b95bfc57

          SHA512

          31f75d3a40c2c72b3551a78b452773542c1d4af540801607275dc7f9599a0d38de35762bc993d2c76ded0e19537e32a72940e5fd02b3617d3e6fbe880cd383ed

        • /storage/emulated/0/MzwDownloads/datas/mzw_new_downloads.db-journal

          Filesize

          512B

          MD5

          952e31cba0708837be55c382b5c7a1e6

          SHA1

          384631616c738ae018f0a4b303caeaf5f233b70b

          SHA256

          78446a9e1d55fb3592eae53231f2d2bcfa23d2e8f29c7803fe3074c3ce40a97f

          SHA512

          ee99f9a90a1bffcae09c879155bd169f9b22d54c5e0fbad5bd2f2efcad8fe4b7736ad4650c9871ec4562b05df23c972efc3eb7882ffdc9974a920125747a06c2

        • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db

          Filesize

          20KB

          MD5

          72fa68ee5eaf81f25702a32863dbc033

          SHA1

          e0a3c4aea607f3a2b7c0d88a7bf970fd245803fe

          SHA256

          488cd6bfaf3b93313b9cccba32cdfffe277c6b191e1ab07957609abadb754c72

          SHA512

          f92cf0c39371e04709b69d4c4b7942c7dd24df46bc1c91fc720438d5e7a8338cba6001d3cdc391fdb1cfc4d2c129cc1df5349b140cc391d0bd366380c418e596

        • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-journal

          Filesize

          20KB

          MD5

          4bb994dcb5ec726815b15c42f1e8b0c2

          SHA1

          3d6b758d253baf3eeabb006a1b767a08d7bc6de3

          SHA256

          fd9d576b082bf5bf90ea2b35d0a07093f32c6f98d6f8c5c14e695232f720f74f

          SHA512

          ffbb0e58f6ab16e187f959070ae8c12ca817798c253f3aa4ab9d41dd25125837c51eb2fd870ba97bada04c9cfd653a7704004dece2a27050b987b828572df064

        • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-journal

          Filesize

          8KB

          MD5

          878478466e68a8610cc02f8cfdcb6866

          SHA1

          756dda3eff6ffeeaaa8cee036bc85fd7cc0fe0f3

          SHA256

          91d0f5f129c1ffaa454deda155653dce65d9dbcada4a81c6ee618586d25c9192

          SHA512

          cb3c8a6712e062a56618863aa64a3f66b604763d753c7e020a3e8c9db0698b7f685340cc5a7c31bd16dcfacede311492babf1e8fef51c37410a484b569b19517

        • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-journal

          Filesize

          8KB

          MD5

          23a1037eb73cae4ed7f7caa9e961c0ee

          SHA1

          f20189bf953cb5df2f8cb614d13d66cde4fea195

          SHA256

          b1d985f4f2965e1b0e848c32652a4e6c36fb37e1e2446188638ced8905aa2659

          SHA512

          b17ab579a0d1edba7ebb3797770793291ccfb84965f96286bd9d8337a738819a35477d98664a8c80df01eac8b3eca0234066bf95387c9227a986a30d465c8a72

        • /storage/emulated/0/baidu/pushservice/database/storage/emulated/0/baidu/pushservice/database/pushstat.db-journal

          Filesize

          8KB

          MD5

          8ecfd6b60bf4e655277aad246ffdb911

          SHA1

          03e7776c35a7b14537cc971c6171fd44148ec6c6

          SHA256

          406dba9d9f7cff011a1af114faa0e552488ac5b33a39c231fff3059b747f3d54

          SHA512

          93f71572dcdcca89b3b221bf32a0d15b86518fbfbae36ec67d7366c5f696ae19d39ddffc0379dd81af527253be049cec662f868b8df442c7d11e0e994e22f4f8

        • /storage/emulated/0/data/.systemid

          Filesize

          36B

          MD5

          10eab7a8f18ebd4da26f269d87f5e587

          SHA1

          1b34778fc5e1f5b005c3e69f169a8ec747ddf71d

          SHA256

          2b77046001c8e7c3ee491b4cd9e0ac47cfa9544d81689ed5665cdc826b0aaea7

          SHA512

          5efd965a3e7a7f80ec7116ce122ffdc739850d3669759be048c860c3b52bc9e15430a1e3f1ae1ddde535142ae55672cba4174c59480565354ec894a5e2790141

        • /storage/emulated/0/muzhiwan/logs/com.muzhiwan.market/MARKET200002_cache

          Filesize

          8KB

          MD5

          df015198703c0984766c9daa3a699540

          SHA1

          75b252f1d14327346a098275e2c4b28308716ba5

          SHA256

          004d2b219f759122c48f8b42a752a1dcff83e30736030d583ae577bdc383aeb6

          SHA512

          5d28dcc26aceaab739f7984e79427fadd70d9312d48b9b30bbd9cc11b1a16c026128940039fa272305e372eb236278c699daa15094e397a4a8d90a202794a61c

        • /storage/emulated/0/muzhiwan/logs/com.muzhiwan.market/MARKET200003_cache

          Filesize

          20KB

          MD5

          61dce29c806fd485bf0a674347a94154

          SHA1

          196c12193d09e8072e5560ee7e175465a2be8a6b

          SHA256

          d53830bdf9f7a37c7f2a58ccffa941e212ebe8e426be010113019a09cf7ed68a

          SHA512

          8da4fa3b6de32f3e174fe16a3a31868697b904c0ff1840428d483e92d07ebd39d94449ad0af6e03d91b7f63e0ac6c961e3865ac32707124272a2910584e84be2

        • /storage/emulated/0/muzhiwan/market/applist

          Filesize

          380B

          MD5

          7d87b9f54454aaa5bdc1dd48635e2942

          SHA1

          131470a6e775dfd1140e52fd4b6ee921196a5ae0

          SHA256

          763b7cb40ecd7801f915e4a517f5d01cc16c017fa3a0858b7987475ac213a4be

          SHA512

          947fbacebd21dce563c3571ea9c1606b41df957b88c6be00b9ea874b41bf09c25fadfb7c1ac73556ea693a741a07e9090266fe6a1c7153ecbb1be31cb0fdac16

        • /storage/emulated/0/muzhiwan/market/db/mzw_local.db

          Filesize

          20KB

          MD5

          7496516c55c7a726ff2f0652cddc1aeb

          SHA1

          cfa02237489f31ef423e5b216badaaeae8870a2f

          SHA256

          907591bf68ae7fc6a9d7267b790701b358203dbc37f793c6a462af5f0a176d6b

          SHA512

          d7934054189d01c758210215dd996cc2273af723b3ed080fa87ab4a83b8938e8fe570bd8ea9f3d67f419b6cbb07f6b978de794d41b86d3e6f0ec42daa77e81df

        • /storage/emulated/0/muzhiwan/market/db/mzw_local.db-journal

          Filesize

          512B

          MD5

          8e33e692a75ad378759d4f10717d1c48

          SHA1

          7c25db75711f0a197307213d118cbc5d05fcb2fe

          SHA256

          190b4c63af3ffc9eb2e2ad2fb4e4287adc114d8fc1a528253fe7b36a18e4e4de

          SHA512

          e281356fe52ba8bf1bca1b686cf036ee9ca82f0508f01d95554decb55e6958393dcf6ec8ad3f67bc4007e56e88f0dbd9e5cee775aeaf831d180e4f963c2a507c

        • /storage/emulated/0/muzhiwan/market/db/mzw_local.db-journal

          Filesize

          8KB

          MD5

          af6871f180d1f58871888bcf0d456706

          SHA1

          7fe1e07b4e10dde96a6e1affd2d4837d065befec

          SHA256

          f236106f8f38e0e73980ede336ec63298d5cade3b7cee2e894bf52faf3e20598

          SHA512

          de8111b8f65a0681cff9a12bb8bceaf5eb57c0d14c4d51feb8336f6cd86fb23d70bfe1de0e57fab5b1d7d77bdc2acdc1b3cbf66cb3d554a6577d5782bf9e4790

        • /storage/emulated/0/muzhiwan/market/db/mzw_local.db-journal

          Filesize

          8KB

          MD5

          9dfbfbee90ef6f01d353b09ce3f2c0c9

          SHA1

          cffb010ebb0a1531703efea5771c1997589f5c9e

          SHA256

          e76a82859e9be7311f60a1f46f54ee23de55786aa270805e0eb73b2e13e41e7f

          SHA512

          b92bae8a02c17f37e68d2e243d02eedabe0508d183901df289b5065f0e7be007905d7543b2bba63cc8da3a7b66fdd7ae20762ed3ff47a3cf1ca91c779fc13f48