Analysis

  • max time kernel
    2724663s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 00:37

General

  • Target
    ab245d83ddabcf9415eba605d200ad789d3e7e367689577910cddf596bbdb812.apk
  • Size 24.3MB
  • Sample231224-ayy9baead2
  • SHA256 ab245d83ddabcf9415eba605d200ad789d3e7e367689577910cddf596bbdb812
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.zjjc.app.baby
    1⤵
      PID:5128
    • com.zjjc.app.baby:QALSERVICE
      1⤵
        PID:5177
      • com.zjjc.app.baby:pushservice
        1⤵
        • Acquires the wake lock
        PID:5209
      • com.zjjc.app.baby:QALSERVICE
        1⤵
          PID:5286

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              db_chat

              • Path /data/data/com.zjjc.app.baby/databases/db_chat
              • Size 20KB
              • SHA256 3e4a46d1c5d0985487763c3d46f7d8bfc2fd2d4e224aa4d5aaf70a2af26b020a
              • MD5 SHA1 SHA512 SSDEEP

              db_chat-journal

              • Path /data/data/com.zjjc.app.baby/databases/db_chat-journal
              • Size 512B
              • SHA256 6020291f55910938a9d52d80cddfa3ad6dad9cc22bcf6a8497a80c1a7d501488
              • MD5 SHA1 SHA512

              db_chat-journal

              • Path /data/data/com.zjjc.app.baby/databases/db_chat-journal
              • Size 8KB
              • SHA256 efa7f8b1806d942f82a6604768dbbfd1c4a37363f33598f4b1df0f6310d9c379
              • MD5 SHA1 SHA512 SSDEEP

              db_chat-journal

              • Path /data/data/com.zjjc.app.baby/databases/db_chat-journal
              • Size 8KB
              • SHA256 9f34b11a39ced2bcc3fc979c61d576ae531b931502eb37bbac0c393915588128
              • MD5 SHA1 SHA512 SSDEEP

              increment.db

              • Path /data/data/com.zjjc.app.baby/databases/increment.db
              • Size 12KB
              • SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
              • MD5 SHA1 SHA512 SSDEEP

              increment.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/increment.db-journal
              • Size 512B
              • SHA256 6e230ad994b0bb0f119fd8e98f02a735e99c618528271dc7eb41bd9aec64459c
              • MD5 SHA1 SHA512

              increment.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/increment.db-journal
              • Size 8KB
              • SHA256 ebf0b5367c890555ebe04b173491d677fbf3af26634f63fdb735dc43b866b2e2
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db
              • Size 44KB
              • SHA256 91f8dd743b1363847b580ae59646d1b6945dc7540aab8a96f004bbc3e5f3de4b
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 8KB
              • SHA256 28d7ba5595740e33b4aa9f56819b24cca9ab2a3ed1de2bf93a15f4f2fc9cce76
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 8KB
              • SHA256 e53dec714a8872cf20a6277de096fdfc112847d457805554e2557363b6a67659
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 8KB
              • SHA256 23d3c1d63b4fb22498b8bd603d1f69c35d85697d0f72ed6be419399ad743227b
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 4KB
              • SHA256 da7d565c6695c574af61f37fbdfc128495ed256fd5154a20f459e6f4da165391
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 8KB
              • SHA256 80d9f4def30dd78656a322718419bd2bdd42f30a23f3fe4d7ef156eb3b103b25
              • MD5 SHA1 SHA512 SSDEEP

              pushsdk.db-journal

              • Path /data/data/com.zjjc.app.baby/databases/pushsdk.db-journal
              • Size 12KB
              • SHA256 fe328ab44d15e0fe8e192e0019b187c092c5a72bf12385cd7e112e0d2d245351
              • MD5 SHA1 SHA512 SSDEEP

              init.pid

              • Path /data/data/com.zjjc.app.baby/files/init.pid
              • Size 32B
              • SHA256 c5a7126bfde59eb12a1e75b01a3286a7220c1ddb1ab3b3d5e2732d5755c726e1
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 20KB
              • SHA256 a9920ac34e051526d5978299c3ee7809c830036046c009835e91e922ff35d6b5
              • MD5 SHA1 SHA512 SSDEEP

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 91B
              • SHA256 a6154d227e47768ea4868569b163547cab73092b95829d0e7cc79d4c9d4b8b69
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 92B
              • SHA256 4cd02d2fab1af2d9dd1e83cad2f61683a86b3e91267522cb770a7b78fb321bb5
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 90B
              • SHA256 572011487082c11679e865df1a922dfb9200e20d314ac0bbe869bb0b135f6906
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 94B
              • SHA256 78491abf154856e0a91acc8b23b31f58869bbbf141fe937a39585c66b2256c89
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 91B
              • SHA256 b3918b3b12df0b558afb77d8151d979c638351aa221e45aa1aef699649392ba5
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 92B
              • SHA256 e2ca9844b78bd33dd6bef4fc56dcc0c6a2f11fdcb81601aa6a77d010b7bd6c7c
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 91B
              • SHA256 72a6b2fa22b90119f48a2e9535295e5d28394ccd43a3afb12964b21cb93a9a12
              • MD5 SHA1 SHA512

              pili_qos_index.json

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_index.json
              • Size 10KB
              • SHA256 8498163cd8d3c02b13eee90892f58df578e77c30e9d9b3ed82fb4cb16094289d
              • MD5 SHA1 SHA512 SSDEEP

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 54B
              • SHA256 6b0bf27f76664a684996b9596f9990aa7a046f9a6808ca52aa60f43ab004c697
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 54B
              • SHA256 90f1ae35ec49ed888e3aa58c472b0259c83006fc042559b49829744957fb06b9
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 54B
              • SHA256 3685ef12295fa78f22c7d2f459e98c6089860d73c4e88763c2b47cea4f996624
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 164B
              • SHA256 4e89db10d5c5b56f6eb9f36ecc8f8f82e18d01b0162505282bee0c89b6b59a7d
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 164B
              • SHA256 d9c13255289370c21b6332e5bbe53fb63a58f6a931dcb205f22476b7bfe8bcad
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 164B
              • SHA256 7ab6e5a7e8c939b28c4bf27e4a1eec4fafe544e7e26e2a038421d156730dd3a5
              • MD5 SHA1 SHA512

              pili_qos_log.0

              • Path /data/data/com.zjjc.app.baby/files/pili_qos_log.0
              • Size 75B
              • SHA256 6a685bda8589f33cbdbd47c1bcda2b7fd7a0a7e939362080aa990872beaec330
              • MD5 SHA1 SHA512

              4umb5qzkzox1qgaanp4fvxi280.tmp

              • Path /storage/emulated/0/honey/com.zjjc.app.baby/cache/image/4umb5qzkzox1qgaanp4fvxi280.tmp
              • Size 22KB
              • SHA256 55f6e13a84da38d13369000d1f3a22f03d4983be4ff421dc0fec08f22a5a73a8
              • MD5 SHA1 SHA512 SSDEEP

              journal.tmp

              • Path /storage/emulated/0/honey/com.zjjc.app.baby/cache/image/journal.tmp
              • Size 31B
              • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
              • MD5 SHA1 SHA512

              journal.tmp

              • Path /storage/emulated/0/honey/com.zjjc.app.baby/cache/signal/journal.tmp
              • Size 31B
              • SHA256 cf366641e56bda78476691985943bdf654736ad587f71d185b86cb5a1acec3f1
              • MD5 SHA1 SHA512

              sdk.23.12.25.19.log

              • Path /storage/emulated/0/tencent/qalsdklogs/com/zjjc/app/baby/sdk/sdk.23.12.25.19.log
              • Size 17KB
              • SHA256 e6b3c8721f9e488132ae09c3a7fd67312a5923b242d5cc8a4fa8bd2921553b2b
              • MD5 SHA1 SHA512 SSDEEP

              sdk.23.12.25.19.log

              • Path /storage/emulated/0/tencent/qalsdklogs/com/zjjc/app/baby/sdk/sdk.23.12.25.19.log
              • Size 7KB
              • SHA256 9da42da2145646ba29d245ff4b6aae59504cf3a3259743a79614591e43785a19
              • MD5 SHA1 SHA512 SSDEEP