bc72205fc3a0e9a6c89bac2da6b1cf347243177958e111c28a6ea0aa364cda61

Analysis

max time kernel
2952741s
max time network
156s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
24/12/2023, 02:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bc72205fc3a0e9a6c89bac2da6b1cf347243177958e111c28a6ea0aa364cda61.apk
Size

3.2MB
MD5

e5ec72b27862612c67cb25ba7a21d2db
SHA1

dd8b2d3a458d4bd5600b12021ad5a0377efa5e12
SHA256

bc72205fc3a0e9a6c89bac2da6b1cf347243177958e111c28a6ea0aa364cda61
SHA512

0b2dded5e9ba4659cd83a2ce466c6474e1ccd94d48ec431b4230e7bd228ba27a0ee9c0916e6deaf3da2866477a239d8e45bce51e8d5d4b0ee97f6e6b8609b69c
SSDEEP

98304:AzjSwMz2liJYsZi3wUI8hgSMtOB2OHiTU:g9lAEuS6OB2SiTU

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.fuqi.snackpedia:remote

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fuqi.snackpedia

com.fuqi.snackpedia
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4248

com.fuqi.snackpedia:remote
1⤵
- Requests cell location
PID:4306

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.fuqi.snackpedia/files/CMRequire.dat

Filesize
1KB

MD5
25e57636aee83606d202f04f26c2913b

SHA1
1ef0ade456ba38aa31584d0fbce647d0ba74b399

SHA256
89c56da41f0046c9e733fed330d2636d623510c217f72c2d025df3343dc66783

SHA512
3a8d294b8be98abe4d18116cbf7c16d44a541d1d20dd4dfbbbf3bbd8cb7997abcbaf51790bbc1978135d888c4e89868a9a2575d9cfed65a331969de77ba07326

Download Submit
/data/data/com.fuqi.snackpedia/files/VerDatset.dat

Filesize
172B

MD5
caaa975d7bf4952bd5dd695ade33f1da

SHA1
119373fbb2db036712df72ec9b26c0c2840dfbb1

SHA256
d0f94264a6b5c355dbf5c0516202c732bcae471a2401542b2ca43307727a0d02

SHA512
db2acdecd236eab67cb67151032f53e51c9c04e754f3c21d74e05cacb1ea5edecbbccbd66ee760624b9cac97b8dd77f568324e8abc2b9c16aa73131db81c8b06

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/a/ResPack.rs

Filesize
684KB

MD5
37c7d7a469620c696b8812831a527d62

SHA1
2e54375cde7ad35666184f5c7aeb65d5887f746c

SHA256
f3f542caf19e546f5cc1d265d5e6e35fa5ff32bb24e9282a60ef21d4c8588d9e

SHA512
8726878886379a8174b1ea11bb0c21dc6ef9bfe0ff2eafdfc4260a8c8666be82e3fd95309915aa0b40ad1a34b2f8f62f7c33860247562e84cac7e156dbf995bb

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/a/mapstyle.sty

Filesize
131KB

MD5
db362e36518c847ae80caca571e3c8c8

SHA1
610911bf7869016fb7c9a2026b3024eacf0b4593

SHA256
95549560fbb3d96dc791c2d16fdd5f098784eee75ac293556fe9688fb2f0ec9d

SHA512
41fa2b9b61c131b0926d0f47f86eea56859ca0d4e44ac23647a73ff4b98214183cb0a523336dcae4e2ddb4be932e994e1950365fd3590eb2f7c3b96bd4bb8a41

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/a/satellitestyle.sty

Filesize
119KB

MD5
6034f2a3f8bc9639ae820bd977bde4a0

SHA1
599f7994853b61bc5ee09a75b6383a13a5a685f7

SHA256
753705cb1ab2a676a9ef48881cfb036f212c4a7e7a5d34d9f8708075078e5818

SHA512
acaf0d146e4e3739eeaa40d46f7002776ebc4074bb89d12a5c25b12f53190a0e367ef0bd3225835e7e4b39a70b06e9f7328b1e342a9c5829af7610c14d41898f

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/a/trafficstyle.sty

Filesize
3KB

MD5
1e4b535871c4feb2010b614713def5c7

SHA1
4c5dc67838d12b795b6882c6dbbcc6767e42184f

SHA256
efa3ec85127a21a8c8a74640acc5fe1d992952964d4f257682f832f63c2ad3fc

SHA512
0c5443dbfdafab2e6cb7740587f48ca9a2c971b93afafcebccd17691edaa7c7fb75dfd1b6c939dd591a5aa65977f55e64b6c3690ab0a660432269fc43bf3133c

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/h/DVDirectory.cfg

Filesize
69KB

MD5
4baa4ede52eacda76bd26d5838cc2de3

SHA1
38b65c75440581f43ddb32ef17480e5c87f0153f

SHA256
c0f2b002adafe50265789ca04bc8dab8c176e6a7eaae164fdb98ebcb9ff98eb2

SHA512
58fef595b1db5f8fa7dbfcaa3b6b676bdbec8931ffa833858e2452c2f35a1b192746d2315acd27551594377ac121ec80574deee632d4bfa94b6315b8a0d33feb

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/h/DVHotcity.cfg

Filesize
1KB

MD5
6c495e47c754a9b25437ff9a88c7a51e

SHA1
8c4e36fda1e1f80918a3a8f1812c4e68b2326a4f

SHA256
e68e66e643d690d203a5153156e9cd6383ae1b3c481afa4b19e903d4a82289a3

SHA512
f3c030504cf50fdbd284acbdd893c948fb7ddb7544ce01d11c94fb00fb554f878949b1867fd5ab6c25e76c4be717aa819a917d4f25c8eba904df1a2819becf1c

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/l/DVDirectory.cfg

Filesize
69KB

MD5
65685a117c72fe8fbf5a92b07073c99e

SHA1
b115b527f74e4c291edcaab19b316a446aca8f5b

SHA256
19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

SHA512
e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/l/DVHotcity.cfg

Filesize
1KB

MD5
1c6abcbbd253448057930ad1cc59ac75

SHA1
a5845d1c4bc87b8b4785b456d76edcb8309eda4e

SHA256
a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

SHA512
71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

Download Submit
/data/data/com.fuqi.snackpedia/files/cfg/l/DVVersion.cfg

Filesize
127B

MD5
e962c995c0664b5cd8d067db1561cad7

SHA1
263524863998525598f663ba7134ecec2ab592b2

SHA256
b83792f572112503fa2c542595047271d632318a775061ae3a964948738639f8

SHA512
7337967c5759f8a078eed90adc45054e5642b1e319800549c80395dcdc1956baa8d9741348e1dc0be931f24cdb899b95d4beec35e52995703dad8d0feb04ab26

Download Submit
/data/data/com.fuqi.snackpedia/files/imei.dat

Filesize
15B

MD5
748d9beeaa1899252a7365b780b95fb0

SHA1
2158cbe9044f2b138df0094615afe6616e526c9d

SHA256
59290d2d5a77605f8140feb82e44e8438115fb2f93dc56ed4c225b88c21baaa8

SHA512
cdeb0c4cebf1cc96ebda6940763a940df76120ee991bc7f003480caf055a970f16e4a19ef2ba2c56fa056d539b981e16542ec7239a7b91dd3828585bc2d1e440

Download Submit
/data/data/com.fuqi.snackpedia/files/imei.dat

Filesize
11B

MD5
9a53058b4aec4f5f07a4c81a1abebc8f

SHA1
91530708358294d7fe05f71920089b62745f9935

SHA256
39adda13f61fdc3858bc4e1814f685943dc3e0b8e74a8f50f1cbe27d66b2cfd1

SHA512
c7eb40d82f6e355267c0845a86a7cf63d6bdc25f9566861d0daeb043885661bcd8c4b0a74f15b04f97b542d44bb898add87b201463c0b850584c1b48679927e5

Download Submit
/data/data/com.fuqi.snackpedia/files/ver.dat

Filesize
6B

MD5
5f7335045aed321b93c6ebb7a4d7417a

SHA1
35fbd4bee538b385d7abfc56df4e701615f73784

SHA256
f9d1a10b6885f6c28d841e07df992a2f620dd69e65d0a318523c232982158ed9

SHA512
ae94d011816076c988605e82e75c18ca6cb1708a20f079ac6dadc4c874c16b653a9ade7ec1015deec39bf98b840be69eb6e0d3705321e0bc59c8460c4de6ec4f

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/DTBakTempdat.dat

Filesize
2KB

MD5
6c087c242ffb3ac2ada817650ff1fb56

SHA1
a6776765948c6df020458b71f70d773aeb213bd5

SHA256
50bc936fb110311d0f57c64ae8a03e06f0d346a67d72cc86270f8fb956227766

SHA512
ab2e4e53ec27d4270c34fa4ae0280fc4d1c189f1a934a12405b510a8eee4dbc16f87b64e383f2b1e07b021d091a55a17863432fa89e48f5b05db2a1d588f5fd9

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/DTLabTempdat.dat

Filesize
2KB

MD5
c99a74c555371a433d121f551d6c6398

SHA1
605db3fdbaff4ba13729371ad0c4fbab3889378e

SHA256
e5a00aa9991ac8a5ee3109844d84a55583bd20572ad3ffcd42792f3c36b183ad

SHA512
8785f615b30c07eb4c5f5d72c9b3663521081581ec670631b28be491f5f7ad6c6757b9a2025c68471fa3c9db65305804f6ec6dfd15159b02e91c58ad570e92fb

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/DTTempdat.dat

Filesize
2KB

MD5
d13c85cc9711d44f25cff1c4213c4635

SHA1
12d24a100072f24ef82fff53bcd93d5fbd952b31

SHA256
69d35a123d612fdaaa4758c9470cb2e66e67b8f33fe657190f65929bb44a7257

SHA512
4262d39265fcd76cf20b700c9053cedcb1df2c7d5dbd3e4f74a0967cd75dfa6f795571d070123417eec61d0dbb28067d7ba5b3697179f1aed9d01da65fd0ead4

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/DTTempdat.idx

Filesize
164KB

MD5
9821fa9bf06a0d5162dcaa8b76421dcc

SHA1
921532f0899bceb3d4573c6c1af5c5781f182db4

SHA256
d6441b5f22170d11a2cb15c2b58ab912734740ff3c083e6ebfd83914ea2ca6a7

SHA512
54f2fd30be645b1ab1b4ef3a4cf052642ccfb6f7ca461f8f97ad7a6d674f609e2fe3e815b00e2cbf421fd2123eda59faad451767d8e8479fa54d7f8d59ca9664

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/DTTempdat.idx

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/storage/emulated/0/BaiduMapSDK/cache/tmp/ITTempdat.dat

Filesize
2KB

MD5
6e4165d590cb8f5e934ba317c8e07000

SHA1
d433b1c0bc77146414ad94fb12fc39cbe6a609eb

SHA256
00b865139970e945b1c9390ef93281f8e6c3650da83fd70a7e43aea0f970a05c

SHA512
abeb12dba014466d4629973c65dfb2fbff32cba67600068338dd7902466a342fc053aa008321f8b01fe0c33b218bbf8a1240afefc51b23e4d0e58d43e6b89882

Download Submit
/storage/emulated/0/baidu/.cuid

Filesize
89B

MD5
a90355174b650a63ef1e99d85f81c3a4

SHA1
e08d7fb33f17d4fc33c9f68c04be58292c664ca3

SHA256
bca1de054e046a4295f8b083df7b5cc8a0604cb25adfbc665227927110c4e69e

SHA512
5d18d0ada343af7a430d093364d35227516426abea83b582db2b787a3b5ebcee7ec9ef9a2a09ed41e2b71c8ac17f466a82008791186dd2dc10fbbae254bfc9fd

Download Submit
/storage/emulated/0/baidu/tempdata/con.dat

Filesize
12B

MD5
8d80bc8ea90e9cac010d3ddf97bda5f5

SHA1
f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07

SHA256
f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93

SHA512
9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7

Download Submit
/storage/emulated/0/baidu/tempdata/con.dat

Filesize
172B

MD5
d336d43ca6d289d1bd650ace8e45225b

SHA1
90e9ce8b7cc11e4507e069017aa296ba3a6522f0

SHA256
0e0d89ec75330d564c005a776655c35cd5b9c387e10e862fc6a0e98bc65e1400

SHA512
2f5bcfc367629301229527123b470b253572fb1e0156934fb27943f3d758d229f7ad36dc674f23be18729db65d8536aee3d633ed6a75171dc22bf4a087274ac9

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-journal

Filesize
512B

MD5
099d9fd42dc80026b4f750ea706690c5

SHA1
4ea2eddcc7691c64cbdd639f57b2f9e69ad77f03

SHA256
113cb3bbb2dd85223062356181ef3d07485faddec198f191465a5908e4aae7ef

SHA512
dd53d8d84163a4a705a5f0cad87d5616fc2f20283bd2b1d16b88201aee9728071ce56bb42d2012e6b4beb7f8db0d332249ef62427d3b83b647d67c4749a7d583

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-wal

Filesize
32KB

MD5
87093999934e89758426d94369b6665e

SHA1
5785d368a5674bfd2edbf0e6ae734ee4430c7df5

SHA256
fdb3257b46aea2d8856b68700300c71f42a939b4add56c180cdac21a17eb71e1

SHA512
be4ee1e7d76dbe2c2608fffddde277c1adb232cfb4fadd4e7e489a5203f767f58ac2cec7a64ba346e2e061a73590c1c4dbd9bb44c1c7c1a58b53df8367323e2e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads