Overview

overview

6

Static

static

6

85d610a4a2...4c.apk

android-9-x86

6

Analysis

  • max time kernel
    2746700s
  • max time network
    147s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 20:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    85d610a4a21f2fd781206aad8baaecdaa585e0c4abade5cd95370e809548bc4c.apk

  • Size

    8.7MB

  • MD5

    a291ad24ac09bbb1ff1624609dd7aeb7

  • SHA1

    61c05bba6146a5b4b8927d9e4c6b34f75e5441f1

  • SHA256

    85d610a4a21f2fd781206aad8baaecdaa585e0c4abade5cd95370e809548bc4c

  • SHA512

    0b41be62877877d8471720e904b90846d030defe694786a0d5fe30345741c5114b75a3199ace09051824733b96cf7261689523e37899db892a33d496350d38bb

  • SSDEEP

    196608:3CcgtES6FufWPXOOLD/mXSr2uEyR+OwLdQwLdO:SptEymeOnhrCyBDB

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fzcbl.ehealth
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4262

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.fzcbl.ehealth/databases/rep.db-journal
          Filesize

          512B

          MD5

          6ed66017133d35d954e548ef21a9cfcf

          SHA1

          1674f7cc96fc06179e66be28395b0314991dfafb

          SHA256

          061a10264abdebde9d9828cd64bd511e94793672f805c418dc6dd4d372e033f5

          SHA512

          e6b8d6852f3556af84e797fa253f991059c50e9438fafbdaf54092c5fffa526ca00d52b349dda753f412f332a86efbbc7c0ec8ae11b0f5165908771cbd9122d1

          Download Submit

        • /data/data/com.fzcbl.ehealth/databases/rep.db-wal
          Filesize

          36KB

          MD5

          e73ff918c98288fd54c67b40cd67745c

          SHA1

          c077e9fb811b9888698488a831bf4cfb8c665929

          SHA256

          76db3697a10dc5ff14a2b923d7f72502d20d1ac23f00c4d0abf8fba78777fe32

          SHA512

          19ea0b205c79abb3e27f343147524c6cb5c1ff1863c54e4c45cb035cd991cacff16762adf75ef054cbb0e6b0416aa26136d6997174d19663281ca91ef3f6c621

          Download Submit

        • /data/data/com.fzcbl.ehealth/databases/trinea_android_common.db
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          Download Submit

        • /data/data/com.fzcbl.ehealth/databases/trinea_android_common.db-journal
          Filesize

          512B

          MD5

          25be1de8916ec1406d59af500e8ff247

          SHA1

          d0a5f7262dfc38899e6b269dd7fcd265431134e0

          SHA256

          48c9c24280d56744b4377bc7cccf1ed90cd8b28c67467fed6147f5aa368ba297

          SHA512

          1d38e51c94d1807eaab0ae0dddb6cd0f1634b639384cdafb39bbc35d34e3d9e862e53f9eaadac86e26989252e0fab6188f5f7a598b4d652fc3220d0db6ba6347

          Download Submit

        • /data/data/com.fzcbl.ehealth/databases/trinea_android_common.db-shm
          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          Download Submit

        • /data/data/com.fzcbl.ehealth/databases/trinea_android_common.db-wal
          Filesize

          48KB

          MD5

          550e1f3616d657a36b7b5624c74b8799

          SHA1

          195c9cfb50417d38789cc720921ca99dc90111a6

          SHA256

          d9c7b85a6e30d626939eb55b61975fdadfc1c0f97b24a27aef3b6afb3d275a27

          SHA512

          647b5a14447dae79c374a0bbd7884f0863aa76bd42d15383a1ca3fc4707522aabf5f4a4980090de54097d822d72ac8009d739c4d139ac6d4d097bb5c12bdd296

          Download Submit

        • /data/data/com.fzcbl.ehealth/files/jpush_stat_cache.json
          Filesize

          152B

          MD5

          34f7d6ff16e784c54a0d1b2803e73f22

          SHA1

          09c94e1decf3c3f6e00075e2390142c47c41ed12

          SHA256

          7d680e517a10967218ab15becb89fe4f1673e92eed1208e58854d7e5ede388e9

          SHA512

          6a37e3f2db572e2305af2b2a6aa0894dfeaffa4a80af57148563c5da7352c7041b38c4163a31436594c17fd61d420db5b8ce8cbb7005675c601f3945a7aa6e94

          Download Submit

        • /data/data/com.fzcbl.ehealth/files/umeng_it.cache
          Filesize

          310B

          MD5

          61f32c5bf78a582f98dfbddee5c59093

          SHA1

          1ca7a7c230e2bd4610c8dce2b019008fc9fb999b

          SHA256

          72561aa4b3432937989caf487c51ea20311676672c2fc95306489b24249b7bce

          SHA512

          9f85c1008389ca05ded6acc8071804105b4d5fd0d7af33cbace9b2b19e1195299bc6b1704577b3da17756e6773fd838955b677fa0803acd9bb9836351eb7a526

          Download Submit

        • /storage/emulated/0/Android/data/com.fzcbl.ehealth/nbmzyy#nbmzyyapp/log/20231226/000.html
          Filesize

          10KB

          MD5

          4330fd4e23be432afa2fdbff7979547d

          SHA1

          144574e77fd9c76f09995bb8f66775d248d285b9

          SHA256

          4b29a7f2cb1b30b5dc3256e07be4f33c86ec00df92106f3b6ed7db5cffa583b1

          SHA512

          c16cb35a19c14cd1bc72f1fa4522c6e716e4e69645991854dcce1024e50ae10a6e95c9ca7be95c378203668f40494cba2e294b7c7fe87d2eb5c1c0d4aa304559

          Download Submit

        • /storage/emulated/0/Android/data/com.fzcbl.ehealth/nbmzyy#nbmzyyapp/log/20231226/000.html
          Filesize

          172B

          MD5

          e7a083595206b2d9df75095936118fe1

          SHA1

          83e3d406785138bd0c1674489c59a36f61213000

          SHA256

          25b659b1ae806b63edec6e047e32990ffb2e58c730bb6f3001935f00f510f61f

          SHA512

          8c8ff3dcd67e37de032256573cf2bee4c83d1e19c3ed925c9eeafef16a51f69e8e53f84f9acad730e9e30ef36fc534855bae7e30f6609fb20ba8a455e5d02e2a

          Download Submit

        • /storage/emulated/0/Android/data/com.fzcbl.ehealth/nbmzyy#nbmzyyapp/log/20231226/000.html
          Filesize

          85B

          MD5

          79a8948b84457a96707ed849da44db7d

          SHA1

          43dea9341bb83ca3542c7055f1cb35549f7a35e2

          SHA256

          4ef6417328bfca4f1b7243ae53c9282adef67ce731aaec04096df816682df07f

          SHA512

          33b994b019388d316fdb3146386fa10950203f0033bb2531c715acd3acca2424239c97fd5b020b9eba1771b6592ff8deaca222ab53208e079a232e28c46d509b

          Download Submit

        • /storage/emulated/0/Android/data/com.fzcbl.ehealth/nbmzyy#nbmzyyapp/log/20231226/000.html
          Filesize

          82B

          MD5

          5141a374a41927d257af072b0b74c1df

          SHA1

          0dd35a81f1ed35403dea41b4085af76cb04a8f2e

          SHA256

          c949d324a42e710c84409c89cbff3c318728c07d5dac87d33e7d784fc14f26ac

          SHA512

          9a305b7d1994a81a6e4e6beff22ecd30c043c538bfbfd56c59a0d0f67ec099eec265779a47b8daf7e45d807c3005d16b11965c51986ba2d3a509f93de6bc5e81

          Download Submit

        • /storage/emulated/0/Android/data/com.fzcbl.ehealth/nbmzyy#nbmzyyapp/log/20231226/000.html
          Filesize

          113B

          MD5

          ca5046524c23c11dabd1d9a967a38615

          SHA1

          721fe26ded8c3d13c30c2535dd6092472cd3040c

          SHA256

          c1e26c1d246d64d0a56a71456dd4a3d88d1b850f52dba6a5c4d7dec434bc1086

          SHA512

          7b99593fa41349b2d92bb71db53cd9d228d3af145b21f50efaa019a0ff093c66f06b03207bf0febd579c42e70a6b6659cf21e1ac5dafef3c928eeadddb0bf225

          Download Submit