Overview

overview

6

Static

static

6

ad17d1da43...f2.apk

android-9-x86

6

ad17d1da43...f2.apk

android-13-x64

Analysis

  • max time kernel
    2924685s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24-12-2023 00:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ad17d1da437541e7b85a1ba370076185087168613f67f8209444516c98aad9f2.apk

  • Size

    11.1MB

  • MD5

    a79cfacb4d32f98fe88c7641f37b8834

  • SHA1

    aa11206096473fc1cfbd700519bd3fc900221a54

  • SHA256

    ad17d1da437541e7b85a1ba370076185087168613f67f8209444516c98aad9f2

  • SHA512

    0a8022f6a1b8a8617b1d095b29d484f82005c5dd5d9b05aec5f83dc41e3f9f815ed9e5fd90c1cee3ec1c273d8c74c89f57b7a3d4dccf3b0244c2d92cb7850364

  • SSDEEP

    196608:Z/cq8xZnXk1Kn79HgILgybsqlEz71zaeHl5Pp/0nKzAkR7gI+Uwz36zUyH/Gp:Cq8xZnF9bHbsqCTx/UKzvg1zIbH/I

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.ttgenwomai.www
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4245
  • com.ttgenwomai.www:core
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4297
  • com.ttgenwomai.www:channel
    1⤵
      PID:4426

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ttgenwomai.www/databases/accs.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      Download Submit

    • /data/data/com.ttgenwomai.www/databases/accs.db-journal
      Filesize

      512B

      MD5

      430478d925e6960a01edd23f2e971f12

      SHA1

      7123fc15ce586e8799f4319b67d48387dd6db216

      SHA256

      343eda5de0fa4c4483e0a14fbebc15d2b346d00914c84cff70911b9595bc7a7a

      SHA512

      f80b89e516c368927abd031ef30a4582ccbc828e814dbbc87a87ee611ae56897d33c63f70b319b5a3dd47763fc29bbc01dc7525fe3817a5fce6aa6a7d0cf90b7

      Download Submit

    • /data/data/com.ttgenwomai.www/databases/accs.db-shm
      Filesize

      28KB

      MD5

      2be49203d785388018fce76b7e513c54

      SHA1

      43a6ed8e22e3434d946afd02d75b23bf1c0b2ea8

      SHA256

      c269c48eea7d035634be01dbabb9056051673605125a26ed3ad5fde010d08fe0

      SHA512

      a1b641312d1b53c4befb8e1d777acdd91888c37ccf4307c0700e9a6b64acd7dc4d0a01d688116f0b858130e7953062b70a49a8b1e2a4ff5415bac109747bb836

      Download Submit

    • /data/data/com.ttgenwomai.www/databases/accs.db-wal
      Filesize

      32KB

      MD5

      103dca325ac46c1cdf2a7e3d95969df6

      SHA1

      7d385f0d9c3bb618d00be641d833cd479ffd66af

      SHA256

      b3ee413c86b08af051c5b4b7891cbba4f850afb0334fdcb75acb779163d9edb6

      SHA512

      5deef03775231da0db4a694d8240662c92695378ceee680ab6497d605c154747435d269c6413c8ca280135c208daac00c1dfac4c7c196a56993a191a2a2f1135

      Download Submit

    • /data/data/com.ttgenwomai.www/databases/message_accs_db-journal
      Filesize

      512B

      MD5

      825a3ed2899cd510855f567edf457915

      SHA1

      cd0b13d3209717df54ad311d09221c681c3e0b61

      SHA256

      8d792582a6bebbaed81262630fbd37b803eb513db7ba1b9db14c9ec8f7ea3826

      SHA512

      bd4dba8aa6c629a8b955a1abb1c2f042e6d0e0d05bd19afa426c2b0a8dbb8ee7f03efc10558a6f2abfdb4071629e412d9b60165db670713f93bf84c764231c14

      Download Submit

    • /data/data/com.ttgenwomai.www/databases/message_accs_db-wal
      Filesize

      48KB

      MD5

      228c6852dd5c5e3ed96170f4b38aa7c2

      SHA1

      07ed068223b2db32045926641e91c78c57a9a37d

      SHA256

      e6b5583a7b1dc1f38caa4b4bb7b76b4ac4e8f7bec3d6ff8da0cad8503f3d0007

      SHA512

      003b7f5ea0a446d1d5a6a8024850dc9eb0dab8631402f97f23d95308d4ed71b86afb2d392c43abb5ae267e8c85e1e0cb3e906da6072bbe589f7b16580b489e08

      Download Submit

    • /data/data/com.ttgenwomai.www/files/agoo.pid
      Filesize

      4B

      MD5

      125c0e943c73bb8a0840ab524fdcbd08

      SHA1

      ad594c59413256395df26a21339e8e16e2f2e152

      SHA256

      fca13bfeed47a54af1e745f6fa45da1f8df39fc43f98498a44700efad40c4e5c

      SHA512

      a173d6bff3f9f457fade4c45ac8ce3d2dae08369f671a6d8f750d51ab8479704aa055a010cfc0ff9df35431cba6b43ac82da3e241b20572cf3aa2b9501f31ae6

      Download Submit

    • /data/data/com.ttgenwomai.www/unicorn#cheese#
      Filesize

      815B

      MD5

      96f5a03a6b036428f4a4b69ab931bd7d

      SHA1

      f1371e8a806438641ae58cc75787fa2c41550a0f

      SHA256

      a149681056721a12df495ec28fc64adc0fd6425c89c4c8e14f8971445f3fb33c

      SHA512

      00b2780125164dbf7738b01a543e64560600e4b5152fb1a411b675510b506428dce5a02fd9f527f90390f22068f351a8afacf58d0a5ab26a7c56f5db92750e16

      Download Submit

    • /storage/emulated/0/.DataStorage/ContextData.xml
      Filesize

      111B

      MD5

      e321d55614c7ea3bb573965db86581fc

      SHA1

      04839c83a0707e84225311517334eb5fb7fa293e

      SHA256

      e0966ad4d0f76442ec81de6ca273e645bb7f722eb6a073d5b9efce8eec937c24

      SHA512

      4ed1c6f4b2634790d1010328bf42e64bdc0d7182b0de4012a2ae88befc719bdbbe56ca9261bcd29eb4e94bc7885c3e51bd246f52beb9a3ec61ebbe7645f4bfce

      Download Submit

    • /storage/emulated/0/.DataStorage/ContextData.xml
      Filesize

      213B

      MD5

      aa8aa8cf5142483a5ada988df339bb12

      SHA1

      6950f43a2c474de56f1905b314a8bc902ab19965

      SHA256

      0be4c75f1894d75680c2c3fc0b3de5dd14533cdf2f5f3cac6becd53c08afbd9e

      SHA512

      cb6cba4662d95795e1545afd306fa2cce0ccf121a8b6550b0b8b99e25a35c72deafd59ae3ce198927c3f226e271b2869fdcd25c0461bae02064e48968b0f5238

      Download Submit

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      Download Submit

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      111B

      MD5

      68551eef4f618fedf2ec0eee9db39828

      SHA1

      8b5ae63f629b7a5f9ba51aefa2ac825a99e292c1

      SHA256

      f7d0ee719d32d7a49a77d568335f09165d5e69d947c284c527fe308989e959cf

      SHA512

      a264eae513d1c8d7952b10bd3c5fe5a2f832c7a6491c86060e6594bc35f31d60e621feb453bd82113c5a06fec70a19be0ed4d91c7329a2bb5e29997425144d54

      Download Submit

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
      Filesize

      167B

      MD5

      050333e649b7ca2f56d9362179b1836f

      SHA1

      5bf4d7e55c37091b07eff9abdb016413b56b01ad

      SHA256

      9a40e3b2d856455d5dc8c9c7b8f84371e7fc5f675df1ec8510385444b9ccc591

      SHA512

      d839dc22e74f9a463d37bca6778583c0cf3c5480248312f3533761798ad6de2b8f8d4edcb7d53c17b28f255e7199ed98849b3b2560f792aea0da36c8388b7bc0

      Download Submit

    • /storage/emulated/0/Android/data/com.ttgenwomai.www/files/tnetlogs/inapp_20231228.log
      Filesize

      32KB

      MD5

      5616114773376d9855c7cdde5044c036

      SHA1

      bd02f7ba76f3e63e19f94553f0f5b1f57587ba6f

      SHA256

      83ab84d293dba70694e7f661161d21c64a16d051fa4ab43022d05481a3cfeefe

      SHA512

      8f371a9e08b10627704433925d11b75fd23539d2623eba152fda54c4883a976030b65b3bc49c1172a8ca4544cf4c81537c369a6db30b31db787df081adc526c1

      Download Submit

    • /storage/emulated/0/com.ttgenwomai.www/unicorn/log/tmp_u_20231228
      Filesize

      512KB

      MD5

      59071590099d21dd439896592338bf95

      SHA1

      6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c

      SHA256

      07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541

      SHA512

      eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668

      Download Submit