a648386b3a24c167c49afbb8e994ade92c18fa5029f15496b21ad51bb24601f1

Analysis

max time kernel
2907011s
max time network
161s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
24-12-2023 00:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a648386b3a24c167c49afbb8e994ade92c18fa5029f15496b21ad51bb24601f1.apk
Size

28.6MB
MD5

06d0c7bba393a9ba8c3b0d032fed0046
SHA1

320e05dac986ac45370165c76972dd77df36e80c
SHA256

a648386b3a24c167c49afbb8e994ade92c18fa5029f15496b21ad51bb24601f1
SHA512

a75ee84182605871c83056431fbec4b3c4d39ea25d4fc558f498375b16ba52f939795311ce864b170de5658408ad34507275a9ab079ac0bb5ac23726de31cf4d
SSDEEP

393216:O8q9d2hRJNdGLnuxBeQIAciV20gcuIKj48ygg3tHWmTb4uNMf/R2Yt48ygg3tFWq:lIOJNdWUBtLqN43dpSfw243nNSfMJ

Score

8^/10

Malware Config

Signatures

Requests cell location 3 IoCs

Uses Android APIs to to get current cell information.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	cn.cstonline.kartor3:remote
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cn.cstonline.kartor3
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cn.cstonline.kartor3:remote

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.cstonline.kartor3

cn.cstonline.kartor3
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4500

cn.cstonline.kartor3:remote
1⤵
- Requests cell location
PID:4578

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.cstonline.kartor3/databases/app_data.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cn.cstonline.kartor3/databases/app_data.db-journal

Filesize
512B

MD5
801ac0e7e9d169d0bd61a2569176a4d8

SHA1
7fdbd8db5922bcbca3b8fe5cdc4e30f7a9a13101

SHA256
9538c82a0333a319ea1f38030e4efc15359eb1e19d8bf315937463d7e011dc5b

SHA512
c58539043237d96e1599ddd602ba4b20c567d8b901dd04ef91f0d778c230c31ff21e1e4faee678bcf37dbfedcfd5102e3d3cd85d93d9a4a700a1d312aa1193ca

Download Submit
/data/data/cn.cstonline.kartor3/databases/app_data.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/cn.cstonline.kartor3/databases/app_data.db-wal

Filesize
48KB

MD5
bcbded3c16681b3edbce30c5b13c68c6

SHA1
5d7039aed77e6259c96c7fde962ed577039b3510

SHA256
00e02c260e9cceeff5365401f645a51a5f36e73dbf1f43cd774e50a86918bd32

SHA512
9fab7e0c3bfac088d61f47ed7e97404a4d357792e83cb45c953050ffb54a6d27eb70ef10cab388babe151d657c32b326c0a740143f7cd26bb3423dd25b9f6244

Download Submit
/data/data/cn.cstonline.kartor3/databases/rep.db-journal

Filesize
512B

MD5
a69429be2d6f309b77d06da86e2c48cf

SHA1
05db58f7295d08da1de77f789d247f6ebb6a17db

SHA256
65d85c7a4d876f2a21ecda0d974df7a98a2e8d2f4e7bf26ca2515a877ceb1a28

SHA512
994ed2711fe4f5fa1018a22ce394d5ed0e08902a75415d0a9f74a4c93caef2f33465adece70d8f7a0f018cccca1063719ce3391800ac7b97a56dd27b62a92031

Download Submit
/data/data/cn.cstonline.kartor3/databases/rep.db-wal

Filesize
36KB

MD5
155fbb75145debf92cded5b3295a4fef

SHA1
1e6ece896edb9abc7455cc0a8657e0c48029869c

SHA256
df0bd55815e9b45857c649a48060f6c9d3df56b3611be59637a2122addd49573

SHA512
f7e5b7f68c92f3c75fd7c1a7c60cc5d460ad0b7a44f075af50bec3e9578cb8b0cae57ff8c07c121f0145246ceee815ee639cf6c94c80c75e67b3d22e645c307d

Download Submit
/data/data/cn.cstonline.kartor3/files/.imprint

Filesize
934B

MD5
12bbb6440db0b1d42a6ef2ac071f7485

SHA1
dd90b85cc1d688800b639acf195946a8ded1ec8b

SHA256
d66128325c7a3f97c39d0abe739407b5f05edb9053c1dcd1ec3edfec78a20c6a

SHA512
1790bb06ce47f6b5a75af3b3d7ab86a25513fde56408a7a5d825264ddf15d6fece1ca293aff88560699fe529a290ad3264bf7e7e9be6f280b3dd356f7722d24a

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/a/ResPack.rs

Filesize
525KB

MD5
0357e8edde36315c0e0a4f5385de625f

SHA1
2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

SHA256
44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

SHA512
497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/a/mapstyle.sty

Filesize
248KB

MD5
46a9f9a5221dbe4ff71bfcd2ee045c5c

SHA1
915cb3bc2f0096dede38afc1cd7f09c8782360a9

SHA256
ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

SHA512
185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/a/satellitestyle.sty

Filesize
166KB

MD5
3f1348cd6165c9a66a9892565c917ca1

SHA1
96f0c939438c494cf3fd89246d458e92c0c7203b

SHA256
5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

SHA512
405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/a/trafficstyle.sty

Filesize
4KB

MD5
6a86f30539dfc9332cd235fc48fcb62c

SHA1
5c202003f6346edb85175b8df7c460793f5512c6

SHA256
34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

SHA512
f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/h/DVDirectory.cfg

Filesize
69KB

MD5
4e9eab735928758b860e48b2f9befd7b

SHA1
7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

SHA256
1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

SHA512
c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/h/DVHotMap.cfg

Filesize
10KB

MD5
c16f5ca1517683c46e02a6b71aab3c00

SHA1
2d09a048d1b8d556d89d4d723947e9e234b5e59b

SHA256
13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

SHA512
a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/h/DVHotcity.cfg

Filesize
1KB

MD5
883c30365d5d377966125dd0c079debd

SHA1
d296ec1e3f4badb6e3e6166c1473fb55d4265761

SHA256
50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

SHA512
00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/h/DVVersion.cfg

Filesize
86B

MD5
298924848d2517a508f43ff0cc51bd3b

SHA1
b9fcde7b86653ead6deb57280a6049cf87745710

SHA256
0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

SHA512
63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/l/DVDirectory.cfg

Filesize
69KB

MD5
65685a117c72fe8fbf5a92b07073c99e

SHA1
b115b527f74e4c291edcaab19b316a446aca8f5b

SHA256
19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

SHA512
e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/l/DVHotMap.cfg

Filesize
10KB

MD5
cc3fad9057e0940ad4d4c7ad27922023

SHA1
403cbbcd7b819733b5caf49ed2a58d654441e99d

SHA256
f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

SHA512
ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/l/DVHotcity.cfg

Filesize
1KB

MD5
1c6abcbbd253448057930ad1cc59ac75

SHA1
a5845d1c4bc87b8b4785b456d76edcb8309eda4e

SHA256
a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

SHA512
71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

Download Submit
/data/data/cn.cstonline.kartor3/files/cfg/l/DVVersion.cfg

Filesize
127B

MD5
d54b7b380a5ff46c78283013a07d8e0f

SHA1
f697c5f7028ba2679a96d6bc5291c38ff96d7982

SHA256
c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

SHA512
ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

Download Submit
/data/data/cn.cstonline.kartor3/files/jpush_stat_cache.json

Filesize
131B

MD5
69ad54218644b5b58f895270fdebcd05

SHA1
f768afa49a8aa248ff2968181a196a8ac9c450be

SHA256
7b0387cfd6fdecde97c8fc2cae2f300e5be15c2703a98453850a15c96f08ac6c

SHA512
a41c9bd46717b2c999c4b5dbac1ed280f04019145ce6881acdfc9d963acd2013480fd63d20b32c0b43ae9158e51e528226de5c3622df7f4db4331ca9e2dc7b22

Download Submit
/data/data/cn.cstonline.kartor3/files/lldt/firll.dat

Filesize
1KB

MD5
1490e937307b8bb292abe9319120c4ae

SHA1
313305338a0650f734428e67a782f2f61a4acd14

SHA256
65cec629041dfc09c28cfad742dbb154809ba700613f8dccfbda38fbbd314f4a

SHA512
f96aa179e45ea121c6147f773963f969103ee6e078e74aafc177ba3d3e0f7aa8f847595cc332e4e06e9cafe709c46128864544b9d8f2009385810f75f6ccf6f5

Download Submit
/data/data/cn.cstonline.kartor3/files/umeng_it.cache

Filesize
310B

MD5
c9082ea11790f60f717dbc7a5eff4405

SHA1
0493b8abc4753f6aa08c3c7f914b7a806aa61a83

SHA256
0166a31eac982f7522f982b73786afd648586dc371586fc00cfec31b8196d4b0

SHA512
11c37b9cf8d5de931d6a8a36fdd29117156cb35ba015c71e0c7fe68094d8ab397221fc5cd8e25f8d0bffe753b8496029592d63a8bcac073038585df72292e150

Download Submit
/data/data/cn.cstonline.kartor3/files/umeng_it.cache

Filesize
158B

MD5
a485891f99de860c812dea35d80b99ff

SHA1
34c7ca27dac4958552acc7accb8efed5367addb1

SHA256
2564c5d589a4540db4138d596973a5dc9ec3ce52b2b1d542a0dc49272d52e2f1

SHA512
18ae8533998868124ceaf5bb5fb62b99c990b530c006fe1dc1f1aa3227fd149bf1e6f290d6737067ef8cfd49842c107039da08882fd44d418c7d4fb3daa8b043

Download Submit
/data/data/cn.cstonline.kartor3/files/ver.dat

Filesize
6B

MD5
8e31aa8d6b61e8b044ac3346e87098d6

SHA1
70e4050667039f00eb5231bd731b9f3cb5daf00b

SHA256
d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

SHA512
2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

Download Submit
/storage/emulated/0/baidu/.cuid

Filesize
89B

MD5
6c9e962af4f631d806b09b7f508ee75c

SHA1
1e92ebd6b37725404f34a54677a97fbf4c9f7477

SHA256
070e04be6babe60d32584d0b500a978449c3506bb41e2ee122a43f89457f3296

SHA512
daba8fd129fe7d69596b52335963d8a513cc2a7dfd3fb0e9d6e3143f92b3dfbeeb20217dbd25de9263db9854d71e1b07f3e2fbe771a58494881897f1f131566f

Download Submit
/storage/emulated/0/baidu/tempdata/conlts.dat

Filesize
10KB

MD5
4519eee18a624c6abc8012a46a548d96

SHA1
e2d42f2726bd8481d5608b79e10ff14dc8bfa658

SHA256
ded9f04ae741be1df33b39539bf4a90800c20ee94a1c34a85a43348b2bd5ad3a

SHA512
435823efa9e1460b827545aaa5dba93bcc541a7cd70638bb54ebb8293ae575feaf45753b88c95727c74a91431052b9d893c15be9e0ee3d9ec3e9807fee563a4f

Download Submit
/storage/emulated/0/baidu/tempdata/conlts.dat

Filesize
157B

MD5
51421db431b57b69a40343bdfa6777f8

SHA1
1cc23d9f6ee684d01a37de7cfa84015132c070af

SHA256
7979f98917c6d269f332425788c2adb74f2d80e07f06f518c75caaed92bea5b4

SHA512
8cfc61239f41c20aff938d48eb9b67bba1c9dfdacfb95d9854d112d5aac9da6851952afda34df8598e2ab1b4ba6b95a75b170a5f244d3918cc9012b395644306

Download Submit
/storage/emulated/0/baidu/tempdata/lcvif.dat

Filesize
1KB

MD5
223a8be7f977516ddf8df7f9b39ed489

SHA1
e14476e61fdc092731085bda00afdb6e9649a722

SHA256
693b79e2af5bbc4a7a816129ca79d86dd49d71557b9e338efa43f4d3a6b7019d

SHA512
7f0f68eaad1535f9d755c59c775cfeedd40782691ba189587daa4d7d14ec5e2115d9c9dd1794b6b94789250cbbbda8b5d6cd7ac65f230474d74b0ef678c0779d

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db

Filesize
28KB

MD5
0d3e99204c6401ea499fe9e6d9855497

SHA1
09829f00ca458eab7374d5079393a2cd69a2348a

SHA256
63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

SHA512
8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-journal

Filesize
512B

MD5
db2d55b0e12dbce8ca8b66b4ef96e231

SHA1
b88ec95807f695f89a09ed2f1045fcce71adb529

SHA256
b6c6d3859becfeb6614d23ea94e7d336b41ada53f2036deb0e2de31c107cc2bd

SHA512
1f0a507a366e73816353118f2f99f9eba5334c0d26243810a3cdfc870d1a2fb0e36a327fac61f0ea9bed5f8d41c6eb6cbfd9ae695f9c84aff34b4ed8f9de04e8

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-wal

Filesize
525KB

MD5
d55a3b9109ea8e71947945e6433d3968

SHA1
8f03362ac2f149580ff30e9547223996098cb00c

SHA256
e97f0728a01cef7ef0fb404922412eb53982804a2a12671c93165398773873b4

SHA512
ae55fe3f78bea7e7bfcdf0640b96fd6cf35d508e83816ca96687dd4e14e1a65039702da7e8ae853d81c87a9aaf4ab8c63588dfab64f8dad2979f996a3ebf81af

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads