Analysis

  • max time kernel
    2741810s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    24/12/2023, 02:08

General

  • Target

    b9a330b48d134449fb28ca31ecb958233f760af83d6ba4f2bc1beb432fcf53e0.apk

  • Size

    16.4MB

  • MD5

    c34c23b016369b9bfb1e371adfee71b5

  • SHA1

    971506073ee2b99a3410ae71e4b317e4cd328d51

  • SHA256

    b9a330b48d134449fb28ca31ecb958233f760af83d6ba4f2bc1beb432fcf53e0

  • SHA512

    1157edbf45ecb5e1fd3d60909c7408b0600a6b6036544bc60739fa1efc0678a524082712ccb476c571352922c7c42cc2f40af8819ac89234f1a7f5c68d4027bf

  • SSDEEP

    393216:B9+8y8LVQ/odmjnoM2wDtq/sQcmmnEvr25dBuAOXbcj1a2mB:B8n8pZdGnoRwokHsQ6AOXam

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.weiju.wyhmall
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4519
  • com.weiju.wyhmall:pushcore
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4558

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db

          Filesize

          12KB

          MD5

          f41f531c07d4141546a531ff9caffdcd

          SHA1

          9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

          SHA256

          bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

          SHA512

          e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db

          Filesize

          28KB

          MD5

          31369d660d6932be768d7963953dcd26

          SHA1

          d15f81cbdd5d9d81f713ac5a5d3eddd5cb19c6f9

          SHA256

          94f2ce183e6ae9c187cdd69e2201d4732e076eecfa2582d8d500fae6281b0d84

          SHA512

          f0776a06a3233a3e84012ea12327230274bc899a6acde3c75e5ddcfcaec728656bfffb58745a027d8adf2434ea6292c248f46cc5c927a2e9fbe953bdf5931ed0

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          7aa7c3795bff858d8bed2b2922bf8442

          SHA1

          17dd63f0d3f9578e8e8df69ed59f64d3e5143f65

          SHA256

          7419d083c2019cd91c3f677e94033ff68a9e6e808fea1430f07ff2dc83ffb828

          SHA512

          2e656ec9119f11d51d0c211fd3157941408216a097c9fb8d3447ac644f10f6c8be9b6c14ba62ecd534cc4e284b8cc396914e3ed56e7c3009de5abe4140903625

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          e116eae7ac81f23b27961cdb6fe3e364

          SHA1

          b40a1ee398afb89d4890a14f56be59c0cdd760bd

          SHA256

          654d42e8dbc7de6e4c1909ca746457f64b321941c2db29767dd4779508b89a6a

          SHA512

          e35889e62029d3a94a9b8347f25bcd4915d436aec9914a6dd541578d16840b339c193b98632ae808f075230d87a82702b0d951ea2578da482466d4bae155e7b5

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          cc4175a4cd2711bcfc4f0aab23134fea

          SHA1

          13cdb5a8b4de7ad788ce6a63e02fb0dd936c5786

          SHA256

          c50e9b61dee915254a0dbddf6d00519677c757bcb6bec0cffb2448bfb3e209e2

          SHA512

          fcd23db86d71de43362de90c1a7bbafc1b801ff344cd87731352a89643786f9f2871e5937cc10f1fc4e4091cf52902a3255ba01e73f8064daa0950693c1a98a9

        • /data/data/com.weiju.wyhmall/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          e57b21e3cb6ac1fb5526377871c8bca3

          SHA1

          aff1c3ab35503915856537163bc7697a27452c86

          SHA256

          427e0c3cd5801a7fec10ddf21899fe3e4df42b32643161ea61c5c5ec1a543641

          SHA512

          610172e6dfad6ae378f276f4c03a7fb40d896db8e7f035495cfa6601cbbab3f3714517dd54ac7fac74c177938800e557822e0544eb3a7fbf8efc1e874b29b6cf

        • /data/data/com.weiju.wyhmall/databases/ua.db

          Filesize

          32KB

          MD5

          4cac7d31fb94d5c9581893537f64c5ed

          SHA1

          96bef3288546196ac3058b5eeddbe9da1d999fe5

          SHA256

          d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

          SHA512

          0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

        • /data/data/com.weiju.wyhmall/databases/ua.db-journal

          Filesize

          12KB

          MD5

          e7c613cae8fb385a8266305430fc5e55

          SHA1

          d1e10a6434477c7be094119692986d7189410149

          SHA256

          cc361ee8add99aaa2d36630afd5456a075241d23ba24947a2d3eb8a904faba7c

          SHA512

          dc852c0174bccb4f99b2f5fe476b380ce19ea57d9964f5e23c3985fb96894f81f739c9e5ee6f42ef9a6c61943f99fefe8dea6b693c65109791d2ea36715cd30f

        • /data/user/0/com.weiju.wyhmall/app_crashrecord/1002

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

        • /data/user/0/com.weiju.wyhmall/app_crashrecord/1002

          Filesize

          227B

          MD5

          17995a8f7dd0d61a19607e22d40ad645

          SHA1

          febf38f04bae413e070c49c0faf686dee101b0cf

          SHA256

          6e0bfe00966ff24e317009bde7cca1eb6e220ddca2d725f74a353472ac183579

          SHA512

          ec26412a4c051c14a23502660f550f02d111795e19c50c72c8b41050adffc17e7695356e78ab4ef450edbfea7ab8df2f174548bd9a8e74abe07f9ef405b2ad53

        • /data/user/0/com.weiju.wyhmall/app_crashrecord/1004

          Filesize

          227B

          MD5

          d55f4cb050092c3611a77ff7d317ce31

          SHA1

          c2b4b78f7b0f06e2f480514ef840bfb394b47e84

          SHA256

          42789bde5beba46f007e3b8a1bdbb3aafa150701996e72c37203cf097ac376f3

          SHA512

          0746f3281b9745dd37ed7807fd556b0db6e073cde164e22bbf68d49bf052280e4ee735c70849db6379ac71a0a5feb22aa567c790c3204b759c96948760dc9657

        • /data/user/0/com.weiju.wyhmall/app_crashrecord/1004

          Filesize

          227B

          MD5

          f893901511a81c91b7544ee68b5ff4aa

          SHA1

          0171edcdbbad63bf80ac69f353278c98e62dfb79

          SHA256

          909ec9e92fb062639ee7c2f42451b1d52b1815e20a8a3aefef097e551b8d4cf6

          SHA512

          a648f8842fd41a0b45bb023b78f9ec61a839a56918dc5a25195473b05be5fb382def421e507641f732e90d29fa56e54f35db70b934397d3f2341c34b9a4b427a

        • /data/user/0/com.weiju.wyhmall/app_crashrecord/1004

          Filesize

          236B

          MD5

          09a1ad4216290f278ca04d9909e331ed

          SHA1

          d4d075a0713809641834e3a313ef9aae691be549

          SHA256

          25094b1b50d367479c2a0e8e964968b95bf927267bc83217ff4db31e4d00dfdd

          SHA512

          612a9c79616b095451ba2a93eb5bdb1e44c4cbfb202c0e3b4620b580a10200d82c0a6d460250ba87bce9fb1ff2790ea6904fbea218a625588f35e474872771d5

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_

          Filesize

          52KB

          MD5

          15b753047583ec862da208e05d1215ce

          SHA1

          7d6842a4fd1ecc90f954f5f01d0c3dec2be161a2

          SHA256

          bc8348b3db34c2b1a2b8a76c9b0cd60b24be748a9b80e7d674d68e140b33143e

          SHA512

          943a7ddf7857f6add8a2d8f5507c10651f7df43291f792e599bbe5d78b83e2df602b43eae829e66cfe9d37b9a3b17f63742b1104ce4b8511ca70171665f78f9d

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          0523d68203b230e31ab436242451712e

          SHA1

          d2662259b947abc62142078c3a041e6c96cae2ff

          SHA256

          2b284d17ad7d8d927e8f30cf07ec28d32add87d079d907d39effac39042b6401

          SHA512

          2cbc57d8f8e39fde13721fead90870524f94882bcef928874d30c6f6b2d15a0d8e73202c4c5b0ca39a4d8825d3a5a908d4e5700abd24579ae6247b519c24e958

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          fb517a0ba42823e7fa7fec012113a68c

          SHA1

          3a533c374a388414063b90448831d9297efc587d

          SHA256

          6fda3f15fa4325b9767530340e153e79d814ad6b5ab362f9d030d15b7d5dbe96

          SHA512

          670f2cbc8d32afe2f0f67afd4e2a0412b3f353494c33422bcaa6d5bbf3b1ff2629356e34281fdb6f148e59e739449f8dbfb7ca75dfa02d505e5c318e8df17681

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          b988e63c3fc5d4730183c86933cfde54

          SHA1

          9f080e8b9346a750d19a908d475fb8ff0981ff06

          SHA256

          e6d0407e2a496fdce8c0578744ce22e02a83740045fefcbfedc654fe1fd6fd72

          SHA512

          b8cbaecff6f84e349ef4a02527576f88fe16c854781490290cf57b6760262189b31d2f208262dfd8cd97c554a342da82917496794cf7e66f408f941091ebb475

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          58437575ab14503a03308596de6497f5

          SHA1

          9444cb16500b0349e35cfbc9674f928df3be9681

          SHA256

          2faafc303708f43c5e8ff64ea60d6e9f792c1293fa239df231b9e4784ce409b2

          SHA512

          ae40bd2592b3474edd8117af49d65b4b85b99e270fe74f79bfbea72be52202bfc5d0cdd0d9b1e05ef79c373f8ee309368550dace33fdd022422e0d1b1ab73a7f

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          074e377614d6601db45eea70c5f76c07

          SHA1

          976bb1a1f44add03e457f9ada8b4137752250093

          SHA256

          6f192bdf562b639a6bac213d89b91ac3a6a58f560bb5e23ce92b31fe788e9dbb

          SHA512

          a145bda959909f64943e7ea7f669175f48f9fbca06c7f3a4046ce026317341dbeaf7a68789b6283ea250026a6af22fe3947c3bab8735da9238601a6f8ba21427

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          3KB

          MD5

          ce6980e0057bd9ef0bd195147354c60e

          SHA1

          310cc9c8f50c20613a9e8a386f82bde7539e89f5

          SHA256

          9b7aa0a68584ecdd80fc665514b2749eea275b30a8533ee0bb715b58a29606fb

          SHA512

          d46317c5a30b8e61ca4dfc194a0f04e030302b907ad988ed147b9121d785c8a7bf84986be3bf22134df912db28faed8699cdf490b8622b98617d0e4aa6e3540c

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          12KB

          MD5

          c29d9035d1fe6e4f45277627abceb17a

          SHA1

          b04725151f6dc432df19c27bf128ec0719eabd7b

          SHA256

          152bf0347f230402ebe93b1171399f3ceb443e8c1957d394133e3cb76f0dc318

          SHA512

          09cdfc9c2cc1ceac6c42834d13b419092a0a34536e715cfa24d21ee96b01ee746ab2a4b98c68ac156f496709426fb2f50bed5bdf91fcf1bcc2decf266c18436e

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          04da9c205084e1599a280866c113a247

          SHA1

          31173bc7cd5f57b2f049869ec63b471ae99d8bc8

          SHA256

          1b221d2cc51bbc00c8f9c9f0bbaca391e6a8452b06aca2dc0a1916957f9ace84

          SHA512

          5c9d94546a642eca411d11350a1f383e06e341bcf97af8ce110af226c143ee2029ad2c2a6d74c53ec8b5b777d6951f7f6676a7d588bbfbadc5c9c6b5ea2c839c

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          8KB

          MD5

          19e0f15ca9155037d0f4c9af9e7c3c51

          SHA1

          ff74ff28ac2cda1b62fd3eb4445128b1626f6f07

          SHA256

          4cc6b11d0a5e07121093208accaaa0bf0748c98ac7ba894d0cf1be9572194216

          SHA512

          cbee427214cffa412c787443f1434ec6b99929460ac573b8af6d8346857706e7d427c9fdea7e54a05330373319516fbc5a1308ea7b9c2af0096df5bf15999255

        • /data/user/0/com.weiju.wyhmall/databases/bugly_db_-journal

          Filesize

          512B

          MD5

          4ff9feea07afa1dc503b081c2412bc67

          SHA1

          545d7b874500416cc7e7e705bbdb0881efc4780d

          SHA256

          62dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c

          SHA512

          ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce

        • /data/user/0/com.weiju.wyhmall/files/.um/um_cache_1703548849170.env

          Filesize

          1KB

          MD5

          5a5ca89564f6f6d0fd6a1da091548813

          SHA1

          015ada7ab5554cc1bd7da660bef13e6f043dc4ec

          SHA256

          df3e5fa2ff00f49e797bb99bdeb0a09a4b76f64a5881661a3db1e4dc40a6d256

          SHA512

          85ebf6cc38d9c863f5c9a0df4765a54a8f6de4dd16d2fdc9b9f5798e2e1cda646aaec6a3110078f6e7d6316f61ee2c52a930f7c6dc3453be753eedffcde6c230

        • /data/user/0/com.weiju.wyhmall/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          43a763c8098d2dc4584228d32c86f8e3

          SHA1

          27973d5879a49f45326187af2aab4ac476e64b29

          SHA256

          d075eeae649bb975efbf6f3225e34ac9183f08dd312618da3b8c946798ac1479

          SHA512

          ec8d40c0b622846894130358934b50c18e5cb6fa795e6cbbdc073f1f2ff7cc6fb85dfbf05674ce4e21f84e69671542e6dcb26bd2c7235a79e8a38bf23c5695e5

        • /data/user/0/com.weiju.wyhmall/files/exid.dat

          Filesize

          53B

          MD5

          72a6ef22285d4628ff0cfeecdb8eca58

          SHA1

          d37d3806a8888b6eed71c5e0a0ae96a9c86dbe6e

          SHA256

          c5e09886aa4634ab97c7b13fc40c212dfa12c79a682a828b8694492acb419efb

          SHA512

          9f4210361a9b45d3879657938d91ac6a07d97e48e8f6e801c535152c1333b877c058697dd78c0a53d63e6f4813b52c156c71e662929fd29b44decb8736fd484c

        • /data/user/0/com.weiju.wyhmall/files/jpush_stat_cache_history.json

          Filesize

          32KB

          MD5

          13ba2f75c2740f7529c2bf15659fcb5d

          SHA1

          6dbf63eb5cd80628cccfb412a74f4b2358519d75

          SHA256

          22224f4b23f163cae9f1e33329a12a4750e5a28dc65a5ae04e060fecf855e6bc

          SHA512

          37bea6f52e39d28de770bbfbd13795d57e2fd36de926fc0662b432a3d6a0cfcc67da653984d315dd59aa7f044957e6867d7994293ca5e7cda7382752d786851e

        • /data/user/0/com.weiju.wyhmall/files/jpush_stat_cache_history.json

          Filesize

          8KB

          MD5

          4d0d9d54ea3e64b799f34b8d783cf018

          SHA1

          69882725f262a2584b3723340220c531147c9fd6

          SHA256

          d471738421827107381521fed0ed989e76d7bc23d27390551abc9d4a5aa153a4

          SHA512

          25e1146809922b7414d444c4de53ae4ec408891bf40b3bb24d4af6dd2331d7ffbecf5d6c2a6a86a027a66ca637e37602d1ffee54a3cf89d6887cdf174a30a0a2

        • /data/user/0/com.weiju.wyhmall/files/umeng_it.cache

          Filesize

          350B

          MD5

          db683be5db484d7b1635aea2a842660b

          SHA1

          c60db32369a0910ca5ef823339a1f75de1b6ab8d

          SHA256

          094131127aa637eb3ce9569c014bff8f1832d1d4e7e9d7c0771d3a60b112c871

          SHA512

          d0b6689d40d8e289da3585aa49685baaa92ae21aa8d57e5bd483ec34c50e22a2fd6c5954bbc59491794a75e53ff224b7eb27f31f32e3727c2a62355d8669740a