Analysis

  • max time kernel
    2763521s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 20:39

General

  • Target

    8c71f9e68095d2a8a372a9cfe85f63e5ea909a594ca132c13238c27c03407caa.apk

  • Size

    11.1MB

  • MD5

    df1462585dd867d2f91d6b5480bb00be

  • SHA1

    d10d3b6b578b2a4b3a84831c38de996eaaf42c72

  • SHA256

    8c71f9e68095d2a8a372a9cfe85f63e5ea909a594ca132c13238c27c03407caa

  • SHA512

    e17ba1586a2d0c7a7bf20771d1d0c094b97c1b36d19313f08389f07f779285b7935bb7f60efed5602832e5d4fca4795bce07d7e7144465d49dbd891240449a42

  • SSDEEP

    196608:NYxO5Of9lU8Ydfi1jVUS393VTSp4PaoNjbD4aH6lCtiAhEA6:gWAlAd616+VTkyNL6AtiA8

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.coodays.wecare
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4258

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.coodays.wecare/databases/sharesdk.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.coodays.wecare/databases/sharesdk.db-journal

    Filesize

    512B

    MD5

    21fedcd24f53a9cbb081da2cf81f50b1

    SHA1

    2efc0f430b09bbd05cca33f54c26ad221e976cb8

    SHA256

    5a2b7503c42e5e66ab3dafa232b4e732773ef62d039764461b5ee02a9b674902

    SHA512

    6c4feeec19c3445e8a8042ad4c9dd8ec0d1cdb776776b427909017d3330b13f7ae076608fcd6945d3c26b808b3a125f30562b986ffbd11a2a424ec2926a0bfda

  • /data/data/com.coodays.wecare/databases/sharesdk.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.coodays.wecare/databases/sharesdk.db-wal

    Filesize

    32KB

    MD5

    a182a01a5df6338a91e45d3f05000fe8

    SHA1

    3935e47e1d15e8a62e7515c77a73aa9de1294a35

    SHA256

    9b48f2fae3d196dbb14209a8c572fdb3718babb3ad3ccc71c4ce1cd9ab575613

    SHA512

    97c062d091892b160ce6ba4669516a85e0ab13c6038b07b77e507888d0eaf3ee0f10de23ce70b13043da28f8a40cfb1a2a46465992442174ec91aaccb6e55e76

  • /data/data/com.coodays.wecare/files/CMRequire.dat

    Filesize

    1KB

    MD5

    25e57636aee83606d202f04f26c2913b

    SHA1

    1ef0ade456ba38aa31584d0fbce647d0ba74b399

    SHA256

    89c56da41f0046c9e733fed330d2636d623510c217f72c2d025df3343dc66783

    SHA512

    3a8d294b8be98abe4d18116cbf7c16d44a541d1d20dd4dfbbbf3bbd8cb7997abcbaf51790bbc1978135d888c4e89868a9a2575d9cfed65a331969de77ba07326

  • /data/data/com.coodays.wecare/files/VerDatset.dat

    Filesize

    172B

    MD5

    caaa975d7bf4952bd5dd695ade33f1da

    SHA1

    119373fbb2db036712df72ec9b26c0c2840dfbb1

    SHA256

    d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02

    SHA512

    db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06

  • /data/data/com.coodays.wecare/files/cfg/a/ResPack.rs

    Filesize

    65KB

    MD5

    7e7c50016ba5ce4ba6d108c06680db5a

    SHA1

    78791b61dc84042eb0e46b824ecfe28353a40a06

    SHA256

    4f0216de6978a307ae2e48d30a999ad0c1ea41fb87a8ccb5be9296ee8fc44d1f

    SHA512

    4e136be17d87f0a331a2750f2f950eea34cb9c4657083b86bd328b28a485a729b4adb5e6ba5ebfcdd3067fb4e115f43016cab8c35515fed983028e2f3eabf5ac

  • /data/data/com.coodays.wecare/files/cfg/a/mapstyle.sty

    Filesize

    131KB

    MD5

    db362e36518c847ae80caca571e3c8c8

    SHA1

    610911bf7869016fb7c9a2026b3024eacf0b4593

    SHA256

    95549560fbb3d96dc791c2d16fdd5f098784eee75ac293556fe9688fb2f0ec9d

    SHA512

    41fa2b9b61c131b0926d0f47f86eea56859ca0d4e44ac23647a73ff4b98214183cb0a523336dcae4e2ddb4be932e994e1950365fd3590eb2f7c3b96bd4bb8a41

  • /data/data/com.coodays.wecare/files/cfg/a/satellitestyle.sty

    Filesize

    119KB

    MD5

    6034f2a3f8bc9639ae820bd977bde4a0

    SHA1

    599f7994853b61bc5ee09a75b6383a13a5a685f7

    SHA256

    753705cb1ab2a676a9ef48881cfb036f212c4a7e7a5d34d9f8708075078e5818

    SHA512

    acaf0d146e4e3739eeaa40d46f7002776ebc4074bb89d12a5c25b12f53190a0e367ef0bd3225835e7e4b39a70b06e9f7328b1e342a9c5829af7610c14d41898f

  • /data/data/com.coodays.wecare/files/cfg/a/trafficstyle.sty

    Filesize

    3KB

    MD5

    1e4b535871c4feb2010b614713def5c7

    SHA1

    4c5dc67838d12b795b6882c6dbbcc6767e42184f

    SHA256

    efa3ec85127a21a8c8a74640acc5fe1d992952964d4f257682f832f63c2ad3fc

    SHA512

    0c5443dbfdafab2e6cb7740587f48ca9a2c971b93afafcebccd17691edaa7c7fb75dfd1b6c939dd591a5aa65977f55e64b6c3690ab0a660432269fc43bf3133c

  • /data/data/com.coodays.wecare/files/cfg/h/DVDirectory.cfg

    Filesize

    69KB

    MD5

    4baa4ede52eacda76bd26d5838cc2de3

    SHA1

    38b65c75440581f43ddb32ef17480e5c87f0153f

    SHA256

    c0f2b002adafe50265789ca04bc8dab8c176e6a7eaae164fdb98ebcb9ff98eb2

    SHA512

    58fef595b1db5f8fa7dbfcaa3b6b676bdbec8931ffa833858e2452c2f35a1b192746d2315acd27551594377ac121ec80574deee632d4bfa94b6315b8a0d33feb

  • /data/data/com.coodays.wecare/files/cfg/h/DVHotMap.cfg

    Filesize

    10KB

    MD5

    c16f5ca1517683c46e02a6b71aab3c00

    SHA1

    2d09a048d1b8d556d89d4d723947e9e234b5e59b

    SHA256

    13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

    SHA512

    a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

  • /data/data/com.coodays.wecare/files/cfg/h/DVHotcity.cfg

    Filesize

    1KB

    MD5

    6c495e47c754a9b25437ff9a88c7a51e

    SHA1

    8c4e36fda1e1f80918a3a8f1812c4e68b2326a4f

    SHA256

    e68e66e643d690d203a5153156e9cd6383ae1b3c481afa4b19e903d4a82289a3

    SHA512

    f3c030504cf50fdbd284acbdd893c948fb7ddb7544ce01d11c94fb00fb554f878949b1867fd5ab6c25e76c4be717aa819a917d4f25c8eba904df1a2819becf1c

  • /data/data/com.coodays.wecare/files/cfg/l/DVDirectory.cfg

    Filesize

    69KB

    MD5

    65685a117c72fe8fbf5a92b07073c99e

    SHA1

    b115b527f74e4c291edcaab19b316a446aca8f5b

    SHA256

    19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

    SHA512

    e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

  • /data/data/com.coodays.wecare/files/cfg/l/DVHotMap.cfg

    Filesize

    10KB

    MD5

    cc3fad9057e0940ad4d4c7ad27922023

    SHA1

    403cbbcd7b819733b5caf49ed2a58d654441e99d

    SHA256

    f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

    SHA512

    ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

  • /data/data/com.coodays.wecare/files/cfg/l/DVHotcity.cfg

    Filesize

    1KB

    MD5

    1c6abcbbd253448057930ad1cc59ac75

    SHA1

    a5845d1c4bc87b8b4785b456d76edcb8309eda4e

    SHA256

    a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

    SHA512

    71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

  • /data/data/com.coodays.wecare/files/cfg/l/DVVersion.cfg

    Filesize

    127B

    MD5

    e962c995c0664b5cd8d067db1561cad7

    SHA1

    263524863998525598f663ba7134ecec2ab592b2

    SHA256

    b83792f572112503fa2c542595047271d632318a775061ae3a964948738639f8

    SHA512

    7337967c5759f8a078eed90adc45054e5642b1e319800549c80395dcdc1956baa8d9741348e1dc0be931f24cdb899b95d4beec35e52995703dad8d0feb04ab26

  • /data/data/com.coodays.wecare/files/mobclick_agent_sealed_com.coodays.wecare

    Filesize

    624B

    MD5

    737ca269b988f24c6f432a383749e466

    SHA1

    6c97efa537dc315b6d2573837aa0e9395fd7a9de

    SHA256

    773ba81cb51b3f40544f94caf51153d866033602cf78c08e7ca12145a3141dad

    SHA512

    a931939cab203a68ec1a7c29a89828dfc46ef91e2a42bc6649c54a8759da5cd0d5eb5f293452ed4f95a54f1f2756523521208b23b81d2fe083c94adab5b86870

  • /data/data/com.coodays.wecare/files/umeng_it.cache

    Filesize

    294B

    MD5

    b871d0c186c6b20e00146dad62a68f5a

    SHA1

    58e101dfb99bf0d18205b1e9e74fe7791a5250db

    SHA256

    ce008952a5d02c26427b99c1dd64f54ac79e96ccf181bb2e7cef87982fee0b84

    SHA512

    f878fc68d20c8cc2fa612149544cdef8f22a2a2c4360eaaba826442612f63c5c896c9a36f6a9b8ee1e498943b2d34096d5d5325d181ed89ed54394917a4a653f

  • /data/data/com.coodays.wecare/files/ver.dat

    Filesize

    6B

    MD5

    8e31aa8d6b61e8b044ac3346e87098d6

    SHA1

    70e4050667039f00eb5231bd731b9f3cb5daf00b

    SHA256

    d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

    SHA512

    2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    4cb7d7cace3741b87be70494d06d50d9

    SHA1

    c0c0d789f6006c53fdbba3d6218476199e26d03a

    SHA256

    95ba1c7e825597f67b0fdd18706fc96e88759b53dc2687812f6ac9a5e9c853e2

    SHA512

    8359bda2e5e84f55d89c14fde39b572aba3b7c53f67786625cb525648b834f51b60658764812d9301dfcf05ae407cf81822fb2ce4728fa7fc405faec306dea95

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    68fa247cf821dbf74e1c608fc1ec39f4

    SHA1

    cb90496845c8a56597549c9bc6710789a7888258

    SHA256

    0e1acde26512d36c329dda52676698fcdc06d3a85967ef5b672e53b89a659a9b

    SHA512

    b58bc0210118bc73a21e55df0b14e0f7c8ee3829b6adac96af11ee760435bd81aa2dd69dede79a4ae2c14d5f2bafb4b84a71f0b406e3a6686f5dadbde295318b

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    381B

    MD5

    ef9cccee3638c550ce11b291788d2f92

    SHA1

    fc47ae1662f76e441e9186c6d0493466591273c4

    SHA256

    0cc06c3a6b71ad1281ccfb43d44571ef2e5760d0d330808e5d83be2a833e21cb

    SHA512

    675451d0cdd2f900651f3156c47801fb0f3ba5d3a3b7fccb8970cafd1f79cb59510e04d2b4b9ce4cad77c7c9438e116f8b0e427136a949c0c7f634d413dd269d

  • /storage/emulated/0/ShareSDK/.ba

    Filesize

    365B

    MD5

    7701208b64bfd05e520e16dd7b854e08

    SHA1

    f50b9222ea05d9218fb9c02a5a908d155155cc58

    SHA256

    4140cb0b7e57805f8aa16a1a235a059864867fe65dadcc776f9d18f8f03a268a

    SHA512

    c3b6039a23ebf6496370d7021e83e41640b44fe5e16fcc91be5f05274883b2e5b23ee4c8175171a1b09dd6fecd7bc6aadcd0f45d1463a1522628999b383dfaa1

  • /storage/emulated/0/ShareSDK/.ba

    Filesize

    464B

    MD5

    1f8f8a51c802211d4b609802aca0f004

    SHA1

    8a0b34c8441b888fe17bfb0823f05b74c9a265de

    SHA256

    b78e2e63521b12cbe5974193bc67f631fe19eefa609bd76e0dc12d2bec04ebb7

    SHA512

    da486bdc8b8b9d1c994b1f9568dee640e13b1fd43a9c42e5908b89e579686e5f9dca5bbc2710c02ff061d9ef2ba4469cd78297694ec0bc425738b3cdff50d220

  • /storage/emulated/0/ShareSDK/.dk

    Filesize

    107B

    MD5

    c9383021bd97affc44be4db7018c4d7b

    SHA1

    7e680409d1c86e35149bebc22f2cf8c484f0d23e

    SHA256

    b7b7e032170e3190a84359e5c37adede1d58b6bf4c455ef0c01f73335709bb65

    SHA512

    7303f068da97319891e2d25c1c737035f1cfdc365d75d954102b612000e54d7e2b5dfafe10bdf909563e2b46ec3ff9e546423bff6f0aa9496880eab1c1c36a81

  • /storage/emulated/0/baidu/.cuid

    Filesize

    89B

    MD5

    7d1ec9d728c533f0166da76e23a62d1e

    SHA1

    66be642718650f16777bda20e635c865867031c9

    SHA256

    840a343e5d64f598547910f60346e563c26b3435041d8a6b9879f430eb499396

    SHA512

    003f8fb1cf7030fd34ee19b34dac4dde56d88b4e27b631f9f212c38319c8c4565338921761c207dda606cfc724ce2cbe18c441af765fc36d7e21911b5f02fa26