867fa16980dc1f51dcb025f973f54005831015b2993469c5efcefc3cf9c3e523

Analysis

max time kernel
2747806s
max time network
130s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

867fa16980dc1f51dcb025f973f54005831015b2993469c5efcefc3cf9c3e523.apk
Size

13.2MB
MD5

addf078988439bff1a30d393199449a9
SHA1

05f7ce652bd6d4fe87473998215e4f91370a7cbb
SHA256

867fa16980dc1f51dcb025f973f54005831015b2993469c5efcefc3cf9c3e523
SHA512

de4620dc6d869d39cab7bc6a6de82a5dc040c55941939cf628dea31bfc3f083181c69a3189f1ae18c8cbed72d55e0aef63b8c0b1b27b3b44e85d4b8b2e13fc48
SSDEEP

393216:9PKVN5MfHgKJt6wVOxTXZ9vacJZpwl6FtqsC1r7qzGYXeV0mziQ:IVN+fHgKPvcxTXZd7RwsXrCVqGIGzd

Score

4^/10

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.htmm.owner

com.htmm.owner
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4255
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4285
- chmod 700 /data/user/0/com.htmm.owner/tx_shell/libshellx-2.10.5.7.so
  2⤵
  PID:4306
- getprop ro.board.platform
  2⤵
  PID:4285
- /system/bin/sh -c type su
  2⤵
  PID:4334
- logcat -d -v threadtime
  2⤵
  PID:4358
- logcat -d -v threadtime
  2⤵
  PID:4369
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4399
- getprop ro.miui.ui.version.name
  2⤵
  PID:4399
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4425
- getprop ro.build.version.emui
  2⤵
  PID:4425
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4460
- getprop ro.lenovo.series
  2⤵
  PID:4460
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:4484
- getprop ro.build.nubia.rom.name
  2⤵
  PID:4484
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:4508
- getprop ro.meizu.product.model
  2⤵
  PID:4508
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:4534
- getprop ro.build.version.opporom
  2⤵
  PID:4534
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:4559
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:4559
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:4583
- getprop ro.aa.romver
  2⤵
  PID:4583
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:4608
- getprop ro.lewa.version
  2⤵
  PID:4608
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:4633
- getprop ro.gn.gnromvernumber
  2⤵
  PID:4633
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4658
- getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4658
- /system/bin/sh -c getprop ro.build.fingerprint
  2⤵
  PID:4682
- getprop ro.build.fingerprint
  2⤵
  PID:4682
- /system/bin/sh -c getprop ro.build.rom.id
  2⤵
  PID:4707
- getprop ro.build.rom.id
  2⤵
  PID:4707

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.htmm.owner/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.htmm.owner/databases/bugly_db_legu-journal

Filesize
512B

MD5
7257ab82201ab81a78bf499bc4083eb1

SHA1
e808440c0c9a03fff7c7e6165da5d3ca96bce2f2

SHA256
351b50eaa483e9bc0577274b8e21c8960fd2f48d6a037f13bc24bc27a9da5adb

SHA512
5cf58cd82f39d4420e33d2525eacfcfef5fe15f0d294405cd2a2f9e828c936c6431bfeab4221111966f9aff916b947028c2998e5d0d0aca520fc168fd0a76da7

Download Submit
/data/data/com.htmm.owner/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.htmm.owner/databases/bugly_db_legu-wal

Filesize
84KB

MD5
6837eea04e5d5109adcb09b4035c8689

SHA1
d61214307f05ac7a051f9e6d80a292a7d3390e92

SHA256
2935b2cbe38373df8af85861b6d7739b584ffd08c8036a6d052d3ed7a7dbe47c

SHA512
2fd0a6ff22825ec9b4ade7697478fa40c1556aca0bc45fe2f7d1476222ca32ed21e3221cdeda05b31a9973b2847582542d3279dba6366e6a6d4b12c41aaf862a

Download Submit
/data/data/com.htmm.owner/tx_shell/libshellx-2.10.5.7.so

Filesize
57KB

MD5
3cdd894980395733aa6d841a42a88051

SHA1
c16e889d9f9b1a7536d28549455ce9444698d348

SHA256
e694e411ff4b86b9d4b9780d3b1feefbbbd6a79333b1dd1f3b983ec33025ff83

SHA512
facf367e5dfe708bdb05ca7c5f193be954972b49c5399d8de9c0edf519acd5ff73dea11e69f61597bdf898b61a38bec3969881ba6c72e8a63ca48cae78aa3f68

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads