aa8b62f1b104bfea6c37f9ec11751eda01b036b22b7491101a03e85b4ca4668f

Analysis

max time kernel
2918007s
max time network
139s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
24/12/2023, 00:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

aa8b62f1b104bfea6c37f9ec11751eda01b036b22b7491101a03e85b4ca4668f.apk
Size

22.7MB
MD5

354f71ad4af30d72958cacc29cba55ab
SHA1

e820244b59d6630d82849acc8d7f417afd3a15a3
SHA256

aa8b62f1b104bfea6c37f9ec11751eda01b036b22b7491101a03e85b4ca4668f
SHA512

bafce0afacf1ac822852378369e29d94574354cfa29f1405f9946786fd726867ea5b15fe468bd2550f0b675467b4b9fd3215b282afe510a7706b98c74a1a4bec
SSDEEP

393216:l6bnUctkttE3jOjJMsU8qF1K0wz0Bj4KLtdhWg5SuZVuJkDfnp+qgdi/Lj+nYd:l6bUUfs+HKC4KLtdyXyDfpJgd+F

Score

4^/10

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.cyw.yijianhui.activity

com.cyw.yijianhui.activity
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4210
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4268
- getprop ro.board.platform
  2⤵
  PID:4268
- /system/bin/sh -c type su
  2⤵
  PID:4296
- logcat -d -v threadtime
  2⤵
  PID:4320
- logcat -d -v threadtime
  2⤵
  PID:4338
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4360
- getprop ro.miui.ui.version.name
  2⤵
  PID:4360
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4389
- getprop ro.build.version.emui
  2⤵
  PID:4389
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4414
- getprop ro.lenovo.series
  2⤵
  PID:4414
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:4440
- getprop ro.build.nubia.rom.name
  2⤵
  PID:4440
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:4469
- getprop ro.meizu.product.model
  2⤵
  PID:4469
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:4493
- getprop ro.build.version.opporom
  2⤵
  PID:4493
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:4520
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:4520
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:4545
- getprop ro.aa.romver
  2⤵
  PID:4545
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:4570
- getprop ro.lewa.version
  2⤵
  PID:4570
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:4595
- getprop ro.gn.gnromvernumber
  2⤵
  PID:4595
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4619
- getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4619
- /system/bin/sh -c getprop ro.build.fingerprint
  2⤵
  PID:4645
- getprop ro.build.fingerprint
  2⤵
  PID:4645
- /system/bin/sh -c getprop ro.build.rom.id
  2⤵
  PID:4675
- getprop ro.build.rom.id
  2⤵
  PID:4675

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-journal

Filesize
512B

MD5
eed509276f8a4ed62f89850f4f88dc20

SHA1
89d0adf21e45921101d7015684a5352cd4694877

SHA256
39b0b242eb0c3ec1ca0ac7d564ce44e445d88ed92169427fd3b419c6a9a6df3b

SHA512
e180273e6af66eb1350a12bdae7e951e34177c1da24e7c2ff1f2849e60344c16598665d5c8c7aad9d3197bd0f65ccb7f4309207d2affead29596c946da202181

Download Submit
/data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-wal

Filesize
84KB

MD5
04cc4763d6acf2471f40633763ab3251

SHA1
6a830e5c7abc3e09cc5bce6da5ffd89c545b506d

SHA256
5e457c876eaaf42e3e02f27038ee1cb68fcca3056aeb21dc018e7815e34c08b4

SHA512
27490f48216b4f801d05995b0fe95c4b145d19b20544b0a4bdd4e30693c0d763013b4617e9a13af44f979589c7ec817460519db81c6d0e8dc05dfd53f77e2218

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads