Analysis

  • max time kernel
    2947489s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 02:11

General

  • Target

    b9e71e57cac401b307416135757173a0928b61b81242bb63a70193a75962d78e.apk

  • Size

    5.5MB

  • MD5

    60a326e3158b0f2d95c90e538f92d540

  • SHA1

    62bc0802a4870e256c9e6fc1e3ab8033920e4647

  • SHA256

    b9e71e57cac401b307416135757173a0928b61b81242bb63a70193a75962d78e

  • SHA512

    246196678f5a7c62a39a05c1b77b6f099bb9ecefa1b3ee2e8154d9f8a57feb46008742a75bf0da85b212daa1c3c5050b98ced906f52e6306820fa38d02b905b5

  • SSDEEP

    98304:1W553sbSJO/4kCOfVg/5tJOp4Kcp+96Wp3qMVD0deal0QKlmrlhy8Brlhy8Rrlh8:1W5i8m4KfVghtJOfTVD0deU03lWlhxVw

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tyc831.sl07
    1⤵
      PID:4249
    • com.tyc831.sl07:mult
      1⤵
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4280

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.tyc831.sl07/files/jpush_stat_cache_history.json

            Filesize

            156B

            MD5

            a4259d373b4793d8de1a184f1469d151

            SHA1

            59724e5df67e56106cef8eadaddd6a4ddc596277

            SHA256

            022ee44e2eb6a9fa944ddd32854a271468d7c21416c65b26e5ed8406a6ac5b2e

            SHA512

            65c0b79c24c7e1cd9244837137db644b535fc492bd45e7962169ff8a1140e3be76c95c826436d15152d70fcf6f1567d7efe643a5c0537a793d143cdd0574284c

          • /data/data/com.tyc831.sl07/files/jpush_stat_cache_history.json

            Filesize

            345B

            MD5

            c480b85eeb19819af1d95e9ea94ca85f

            SHA1

            cf6909edd15998df25c969a6abbfe5e1210d310c

            SHA256

            97474388ef77189ca7502c58e1747da568c0f458458bd68170f705562ef8d1cc

            SHA512

            001561d11ec9a54e3d84f615674c6d709be10854dc7cc2b13964677ce212a3cc247ad04977a40b36b38ed9f75f37fbf15a570f08d25f610a04a8a7b9ca8abf35

          • /data/data/com.tyc831.sl07/files/jpush_stat_cache_history.json

            Filesize

            174B

            MD5

            0f3c7f9b29336b95cc26dd8f54d5a4a3

            SHA1

            fe8bd547a2fcfe1e2435e0511958bbeeabb79f1c

            SHA256

            c4a536e951d8f3a1d5247bf0760a685cca840c71f288f6b1947fdf5522d075a3

            SHA512

            f919ba7a7a1b8509ce99943846a669e2fd0d510de34a103a8f8f28ba4c55b640e3fdd68a496d0a3659e11556df09378069ff23f52d0ae08ccbba42e1dd237d64

          • /storage/emulated/0/Android/data/com.tyc831.sl07/cache/uil-images/journal.tmp

            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /storage/emulated/0/data/.push_deviceid

            Filesize

            32B

            MD5

            6ff9d5fd5fdc68f89fad447fe96bba15

            SHA1

            78ae9527a3bc68ed70611e05e7d9a07a5434e1fc

            SHA256

            d4fb7c9d377262dca113741763e237a7606a446cc7d2e0309be3247d17f6c0e3

            SHA512

            ecdf453121b707a0be8db538d3e5713a2b4646ae593a13d06c3e759bfe0e062af03b1fc39e700a540023ffb8f8852cf9e2b4cb9f7fc55d006c76c4ee4f10296c