Analysis

  • max time kernel
    2931913s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 01:26

General

  • Target

    b2b35d62ddeda9add6a9999e3524186cb90f35cf92594a60cf1fa31a3ba10c76.apk

  • Size

    19.6MB

  • MD5

    832d74628e64e821b6464f4e5de66639

  • SHA1

    f1ea10978e2eb6a537bbc3ac98b603d916757763

  • SHA256

    b2b35d62ddeda9add6a9999e3524186cb90f35cf92594a60cf1fa31a3ba10c76

  • SHA512

    20dd5a519246b4dc17f42d88f78a129a0cdc8a0df09f3a6d3fcf914da1b5fb415f52342f687acdfa561c3b0b20518c749ae36739ffb59c2f79e325171a090957

  • SSDEEP

    393216:IiqWwbKepklEJwTnqPNZtLtSGv/aXVzcw78P/5QW4/JTv5QNvTtt4sEeh:+Ww+ok6/PnxJviuwc/qTdv5QNvZ+U

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • cn.qns.syonline
    1⤵
      PID:4259
    • cn.qns.syonline:QALSERVICE
      1⤵
        PID:4322

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/cn.qns.syonline/databases/tls_sdk.db

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/cn.qns.syonline/databases/tls_sdk.db-journal

              Filesize

              512B

              MD5

              c5b5142d1c844f5a711a3629033fbb64

              SHA1

              bae83cf3fb761feaad9f657387bc192bde7c1615

              SHA256

              ff9f07e41a1d94c6b97afd240b571ad68931b5ffcf0d71bab8b37bc95a7a8109

              SHA512

              8aeeafebd629f55d6d8f5aa601352db57d6495b306a01cc32d48acb85e73b378dc2e5a67f3f1bd2e9a2b8ef2460453516732702f19cf25d0146b9d7f8fe8da67

            • /data/data/cn.qns.syonline/databases/tls_sdk.db-wal

              Filesize

              20KB

              MD5

              f5548c432bf8a002299b0ca6ed7b6e4f

              SHA1

              170974fc26635cff0e25c61aaf2cacce4cf8cb37

              SHA256

              765d7160c099a4e849c2a13695774b49c0581a33191f0f6b0b923553e8970682

              SHA512

              99b1baf561f81c3272f4789e84859ea167539b3e82cde8e80a67cd6d13b59773e64c9d98f6cf48e7a6db673a101364258f725df5683d86b46aec3903f451d2e3

            • /data/data/cn.qns.syonline/files/QALConfigStore.dat

              Filesize

              56B

              MD5

              672bb8938e851c54215ff3afa851fc17

              SHA1

              8730e5d5c801cea02c7d0d02b3830bbca67ee696

              SHA256

              11e1d817fadc49e25abfd76588be6304bc3e5bbb7423df19c935d49ae5bcd62d

              SHA512

              cb9495532d03deda3fceab8a98f77791a7aaf56a09eb3a209c6a04d8615a7fc6b3881acaeb5c4bb9da37c55e8a256c89401c7b94ae938f4815b234356e81fe13

            • /data/data/cn.qns.syonline/files/QALConfigStore.dat

              Filesize

              248B

              MD5

              f111c7cc99115023bc26aaf267ed2ab4

              SHA1

              fb8c792e2590e9a9b7313c8e373192e0acd1b4e7

              SHA256

              374f64e857c6b6fba72e1b4192bc7179e8dad94deafe617b4c214a4c5add108a

              SHA512

              99094ad5f06dfe26da32df4626e5fb0513df7e8a84686be46cc1f41151014249defcdf78c77396819e3ce0c60c9bf019c41852337931ade1f43660e6853c69d2

            • /data/data/cn.qns.syonline/files/QALConfigStore.dat

              Filesize

              3KB

              MD5

              782241b386b5096e1eec4eb0215760ae

              SHA1

              656b58553263290cc0e33101507d84078245a851

              SHA256

              449db0c1accd6a8bb64c5b84718d841367fd1a9aabaa1682228b43c7ce03004e

              SHA512

              68084b303cffe72c00b7cec4ca0d1d7bf022647db9c7623075f035cbc0134ed097a607d6bf2a61a9f8cd365e036d7f509fb01b5c63002bc74237846ad78b21de

            • /data/data/cn.qns.syonline/files/QALConfigStore.dat

              Filesize

              368B

              MD5

              01dce4f343842cbcc0ef491de2d02c94

              SHA1

              6326d18ccd54652a9cc0f6c8c700f65b3781f5ac

              SHA256

              f9c8d7e4f90da24de3063e8cf7244469c970fcd7675b014381fbd67c820e1d1b

              SHA512

              137fd1b5c1a1bdb21a3b0fd594859c0083fbd35a12824c8ef466005a3125e6b880162e2e5a6aff21c68ea1e08e668a232db5702be16a3982b1aeb9843364752c

            • /data/data/cn.qns.syonline/files/report_v5.msgstore

              Filesize

              3KB

              MD5

              bff28047c7a4cf520ce96b05c734a263

              SHA1

              361e523e272d963262974290fa15c7c696224baa

              SHA256

              bd835114adeb763b8d50ae665de60d2cc357a4fe3b82663ed8fa9eab136b19fd

              SHA512

              2e9476178cd1332778b9c19cb8a226d5f4f7c722c6f9f0aca732ee88c44e2381664cba5f96ea27022832ab167af9ad6c89137893748f2188cf1d409dec81ecf3

            • /data/data/cn.qns.syonline/files/report_v5.msgstore-journal

              Filesize

              512B

              MD5

              43bca16d6927a6991c97472fce0e1dd9

              SHA1

              46fa1db8c06e612772a1083c8e45a98727aeebbf

              SHA256

              393ca943f8d71e1d31f6efa299c65a9be108bd4c6840737b55d30a587957a2bf

              SHA512

              6b9ca463e90b40d2c9ecbafea26c71a7b14317ead53a225e9ce4dbeffc4e2c675e26cd7282353a7e07bc1c1fbc4ca2eebed8b18f82278c28320b6e697b2d82f3

            • /data/data/cn.qns.syonline/files/report_v5.msgstore-journal

              Filesize

              1KB

              MD5

              24c5b95c7565ccba6877e339025a6051

              SHA1

              303258826013eba6c0a001115752205b49540977

              SHA256

              6715008fb6fa94085218f2751d7887ae3440fab68c9a03dd2b1f94e0e54bfe2f

              SHA512

              0894f10f1f2cef9314aa98044268fc187f317eeb7f4d2c72fa6837ecf399b44c14e909c03ba9e91fdd955be5c77131a83efad8690a90a65dc71a35c8218f3f61

            • /data/data/cn.qns.syonline/files/tls_device.dat

              Filesize

              16B

              MD5

              0cf04e2634357c13ccc31bd1f246ed5b

              SHA1

              14e07c69a8be33287db63421516995ab7df637fd

              SHA256

              dc840912b270950290c91a4023f2f14f76a9f9654d8ff4bbb8ded55f6df7ed01

              SHA512

              804851dce5c0ee00222a64f0d6aef35d6f9679bf81b5c6400100866276e024cd5cee0321434d7f6269ac70d8461a89d0197b2683f760f4697ec7eab64b8c9d1d

            • /data/data/cn.qns.syonline/files/umeng_it.cache

              Filesize

              310B

              MD5

              e479f94e05192548e2852c056e857d2d

              SHA1

              305ed624175436c3de9ed3856a44a507e89f6e64

              SHA256

              ef3343dd526a5df0babb941861c5af799cecc0bd5c7dfb349f69ec1c39fe2b5c

              SHA512

              c133145dc2d0a478365315afb96d4b03e71b627030da2cc9d147bfcccf7b3f0f58686f4c2f751ec04485a53250d2b504e3190f6cc0a10b7d4e4f3189d52398b5

            • /data/data/cn.qns.syonline/files/wlogin_device.dat

              Filesize

              16B

              MD5

              9e136747ab40f4c41b6e1e1a888be5fc

              SHA1

              82cb5a16f650996106e1c54cf6a727ed3bed6c19

              SHA256

              24335d9a994fc24560077db890d3ee75b8598ef4f5afded121535be855ecd6e0

              SHA512

              eadc454204c4b66b60bea7811758aa796ee75d8d02c0404748c314ab9a0cdfd4ff00bfbec1b0364ae5b3b4dcd83727fa4f9c6b3570a394d3a22ce225a6ab96ec

            • /storage/emulated/0/cn.qns.syonline/config/Log.xml

              Filesize

              2KB

              MD5

              77a9cac0ad301110b319a744dfc40a1c

              SHA1

              984a8e52f9e25536aba0c25396ba43bb797e57ea

              SHA256

              4ba791bdabe6fd7734194359d48831a41f2b8c2882619d2de83bbdd3dada6f5c

              SHA512

              00132c6992d2952ecce7cb124aeeaeacb680923c9c039967f1eca54cc27a4899e645d63d8088785c6f82bbaed3a7e031e3d7ea6412e5211ff793c38e8654b176

            • /storage/emulated/0/cn.qns.syonline/config/LogFileUpdateConfig.xml

              Filesize

              355B

              MD5

              9fd74a131bad18adc39a3ef06d12132a

              SHA1

              dbad7c8f019eb9852a2521c126bdb2b6cc1870a0

              SHA256

              876a2b442870ff1d7abc04d72400a6e48ba41674ba03a0dc34e922685621540e

              SHA512

              28b3565a0874041f6bb00a0ebbf70505390b08ab85d9fd23c34c54da1e179ae7c7b2d3333fc009d0d921fe1adca30803296e1fa8f490e1a7269547c28d71dc61

            • /storage/emulated/0/cn.qns.syonline/config/ShortLinkConfig.xml

              Filesize

              683B

              MD5

              9fa3195f662def150e1f2f8418b16496

              SHA1

              462aaf41414ac14f36af279b56c86709b0cfafc8

              SHA256

              7db21636590458127d00722c2b5cc027731e6d29aff563932ba1dc7a0aca930b

              SHA512

              6be79e7a464e8a76b49499c57319a8288fad2ec1a09a5fd229aaad98a02cb87eb4b432cb4e2930d7541fa8be1ff967090d17a2a84abac35ac295c35424ebc452

            • /storage/emulated/0/cn.qns.syonline/config/media_server_agent.xml

              Filesize

              2KB

              MD5

              09c0c3c991c49446a9f03f9416728759

              SHA1

              8d2ed9c5d510c614a197b49d04f2f672059c41aa

              SHA256

              f2ffb29842f03f7c72b24af1dfd87a52dcc2ff0ce6e55c3c8f7a2a367b13767a

              SHA512

              7e30fb2c23bb847d1d1f573064f517966460ec3f4fa08eb514dc48ecbb7527320b7031c0b5cc2a715e172c869828e86b45f680f62799eb5a52f7002328a3aee5

            • /storage/emulated/0/cn.qns.syonline/config/n8config.txt

              Filesize

              377B

              MD5

              d7e05c193081abdf8ac5899ca666ba33

              SHA1

              8b8066be46c27a5d4551aa31e612aa4fcb3f45d5

              SHA256

              0cbce76253eaa1dbd57ffb751ccd335dc58958fae92b8d83cc8a3797d253217a

              SHA512

              f61ff8d453aac193a3061d3c9f3cac9f9f97abc2e19577873767e419dc5c4eac56402854eb8f3107ad692d791e77125e0d4b332cf8c41bac08d17f985edfa51f

            • /storage/emulated/0/cn.qns.syonline/log/cn.qns.syonline/2023-12-28-04-48-11-4259-logcat.log

              Filesize

              1KB

              MD5

              5557f1eae9082b9d0f68838cb262654d

              SHA1

              6fef5b66060991cc453190fce99de9e0dfc0e214

              SHA256

              f296b107303fda0a0cf237d0835c1ce461be94ba166f67bc3806fb9a1d44eb9f

              SHA512

              6e9ba445738bfdc028d3c838bee825357e61f607818087f4e3db605d4cffd2877953770e6426d7102d8cfa043f55c0cf69b8bf2ce3d8debd7fba80d789dd52a3

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              89B

              MD5

              4fbdae95314efdc970d2067cbce37576

              SHA1

              60abd7f65814eb8caab79101215c5a14f470a1df

              SHA256

              f91c3acb7a1503eaae79670f29f246002334faed7ec2f4bbade64adc11219bcc

              SHA512

              18bf44896100177180ae653cc17c1de43b4c9d6af7e89b0d7880eae60b2048abab28435f70b5a5bd8170db91af81b084051ebf850bafb1295e1267c7c4db4023

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              102B

              MD5

              9539f45b71e8447154bd34310f84987a

              SHA1

              822bdaa7d55b1e5facd1374d1c5a8d42f490d732

              SHA256

              8dee3334dc2bc7aa34f4e499cb310704bbaf087b9d76b5dd9da77f973d803ee5

              SHA512

              913521b4ea0c26ca0bdf8aad573cf1aa99f109f848e451d0049d447fca25820ea60ce977ceef3fae06023ffd8cf7561ee5c76dbc4537c53f9cd377c3a4078f33

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              66B

              MD5

              1a92eec0aacb9b43f6588270d1ea80c3

              SHA1

              83d7f1ede7ae2051c91a6358dd8ceda93b40d868

              SHA256

              1ec6840ccf6c3746c758894ec241e07f4d0b01db939207869e37c340603f2188

              SHA512

              61c1d9ed338b842aa20f5566008d49f1306842e3a8d8755607f8e041a637be24df89e797c8ac55a41dd48db9cb46eb94e21ef234cbbd80785c80029a4a64c21c

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              157B

              MD5

              d2f18c296289eb39473ee06a76990dcc

              SHA1

              0579825a617d453b98f0f9739b8113f72cbd9203

              SHA256

              4e4972290a26e4aad16fe1592c65f754ee6004260eecc9f55c1ea4f4708637bd

              SHA512

              0bc0d526d50a423ccdf77a65cd1ac3f8a2a6060133caabb410db37ba7b1ec45a00573cc2d2370e6f5bee3287ce49d4543087055beeb5c007585f976113baff96

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              1KB

              MD5

              a3295e900ef1fde7f1fd80c860129951

              SHA1

              7219a50765bb80e096c47a59e44d826e3ef7144c

              SHA256

              383aca9a1035e80e1a4f37042ac4d3225bab734bbd2966cd2cefe2e629052e5c

              SHA512

              4a5ba9f8c85fd3f2542185671e7854bab2646063902d7fcbdaa73583ea2c88ddc430a8f9099745798cbc83eaf44a5786b670d2ceabd4c2dff11bdd23660fa5af

            • /storage/emulated/0/tencent/imsdklogs/cn/qns/syonline/imsdk_20231228.log

              Filesize

              133B

              MD5

              c1b2ac226b39a6d563c0cdad41e6e70d

              SHA1

              df3064131e52c7b4fb8724dbafb731f5a168bd3d

              SHA256

              8ecc7a7fb2a60c09cf5adbf246c6d1cb588e4f4bb20a61c34dea9a0b0b325717

              SHA512

              566c4b9f04dd786f2391c1ad2d94e20f37a79d9048d85b6756b953e727ce9f219c7e59d6ec637489d5aa768fcb99bceb25518546af18d8699a6d6a135726b485

            • /storage/emulated/0/tencent/qalsdklogs/cn/qns/syonline/sdk/sdk.23.12.28.04.log

              Filesize

              1KB

              MD5

              7c9692f11b9773d43115b7b598f57d7f

              SHA1

              afcc23611c05cb3df8a479f2580c44dc37f93102

              SHA256

              27cef1c360eff21fe40a471a4f6a1e5cfdf083ab0e6e5dadc51738d805be74cd

              SHA512

              842ded3e30f8bc9b48a1598cbc2c00ba1996b015d153042638e7059c05a1ba5dc292d846c5022890d8ff1006d87dc1c1af83fa8b72cddf78766c088f9f0a3f91

            • /storage/emulated/0/tencent/qalsdklogs/cn/qns/syonline/sdk/sdk.23.12.28.04.log

              Filesize

              1KB

              MD5

              4a5b0214e3b2300698472a16c1fe972c

              SHA1

              2f8eccaf35b713c6f6dc259f7bb74fd769a8d083

              SHA256

              57acd7a474fe8a4235fb17dca4fc5620f74fb58cdf8b72dc45d1c18f0399ede4

              SHA512

              a8f12b6e35fd630c064e7d571f2667ea497231ebeb1de30ea0ef4f5e7a5dde8e9a513ee05d256126bd82ecfdb77999cfd53b9e8d2f88418bbf18aa8e780925a6