Analysis

  • max time kernel
    2757554s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 03:33

General

  • Target

    c77ff591b90e4fd15e66ab11b66d44ffcde79ea370b0b81fcfc689740bcf9341.apk

  • Size

    16.3MB

  • MD5

    24fa226803b2e78d7345bc59f77e00d0

  • SHA1

    ebbd37115b78b1318fa06911f1d3d4a96bb057eb

  • SHA256

    c77ff591b90e4fd15e66ab11b66d44ffcde79ea370b0b81fcfc689740bcf9341

  • SHA512

    acbd64e35087b2e6fddcc65792e61cf25703b5818f95948b69e33753cb91297535f953cfacd50ccdb1cd8421354f3d79428ba92a51a71110e9704e3b16e60ebf

  • SSDEEP

    393216:30QsGyl9Gqsy/hsE9Onl+PTJPhM8XgWVcfJlMt/UOk1fA+2K:EXVPQyJsdl+PTQ5UcfJ6UNJATK

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.doubletuan.ihome
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5082

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.doubletuan.ihome/databases/.ua/ua.db

          Filesize

          16KB

          MD5

          be905576ea656082019e36db88aa539c

          SHA1

          6c51bc64a2cb83c050f57ac11e092b30b3dfddf0

          SHA256

          b6cd6b3187288fbfa9a3a5e9ce0b27eeac9e7116b80f5ce5fd4a1f9fae7d9495

          SHA512

          5142fcf49d0ef7679f985ebae8eb4a3c563e78dc424f8e33107f38b86c65168587691e9acc454bbaeebf4bf714608ad3c4a8c2a42be917eed8d1b3ebfa2382b8

        • /data/data/com.doubletuan.ihome/databases/.ua/ua.db

          Filesize

          32KB

          MD5

          5b3cbda652c19c13b3ba7575e1847f7b

          SHA1

          60b91bf0751a63286192eee0aaca4106bbf39633

          SHA256

          32058973289efafc4a0d2a6f3d403c81ffaa4f5471e69dfd4f75fb85e5adf88c

          SHA512

          89e60bebf26a843b759553c444f5cfe8337d1546b7ed6513017096c9e895585cf1ec6313560de3ffc65b9bff9161d3e800aa8aaf1227f52e08b9c5ce042e78f6

        • /data/data/com.doubletuan.ihome/databases/.ua/ua.db-journal

          Filesize

          8KB

          MD5

          9ed3dae7edea272ee879a7b48e24425e

          SHA1

          a7de7be5439c9949f95757f1719cae1eb32245ab

          SHA256

          edb07a59f26ad4c0069542637857681094e802cb36a91aca39bdba5eaffd7c66

          SHA512

          a8eee783a8a08666a1545cf12fd19e8b238675071a0e82f3d0df4d8b2c11731c98005deb49dc32e61b354c8419ab7aaf8062e6041074196102cbe5b201d57658

        • /data/data/com.doubletuan.ihome/databases/cc/cc.db

          Filesize

          36KB

          MD5

          67c12933d1e0e63d9801a6aa43092ce7

          SHA1

          b6936908554e4a1986b8eb08289e2d3545e8ff74

          SHA256

          abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

          SHA512

          db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

        • /data/data/com.doubletuan.ihome/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          33199ffc0f3922ae8c57f681b01686c2

          SHA1

          8eb548f1ecdfcc1ad5231c78f11a886d9815eae0

          SHA256

          ac3dcd0f6fe47a1dc5cad5378489a0a27a5e2c54678f5f39bc7030b9daf51c4c

          SHA512

          e2cdcfc43ed4fdbc9f73b5bd47317bf0ccfd1c2cc8732b6e69e16c63648856c1cc71b001241f348218183389523d5b267a7d1b6086fcd16af7931309ac510736

        • /data/data/com.doubletuan.ihome/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          cc4943cfe0866ff906b7ef0fba805c45

          SHA1

          15d2f9b83d61f9a96136d5f2f2d448ec2c4d7536

          SHA256

          b4444945e920e30aa903733a27bcff480a34730740dbe6f20b510798824d3d8f

          SHA512

          a1d1fffc3a99af48513927165de8af6a6712027486bb2de82f0070e1b46bbbc743b0d5939059b6d8076477566de8b6c58b3bad0ea39159d39c51eaf336afb500

        • /data/data/com.doubletuan.ihome/databases/cc/cc.db-journal

          Filesize

          8KB

          MD5

          d55f7ed34551a73b87a7d72c9bfc76d3

          SHA1

          84f583223064a19fd79a7cedc55d351dc71be55e

          SHA256

          b4e50da4f40b69ec26a0703bbaaddaf430fcf9fe053c29a4a395b3a6eb1ae617

          SHA512

          32b755b4d03122916d928ed8ceb4ec64c99da6056cc4d3249ebb4a76ace24b78f41a99b10ff2bd22a9ad373cff66e90515c37739711a223782ea94ff6b22c7eb

        • /data/data/com.doubletuan.ihome/databases/cc/cc.db-journal

          Filesize

          12KB

          MD5

          f1e9db8c8dbc28e1bcfa0de7c2c8c303

          SHA1

          aa9aa4000a560662e5d67721725ae19cf8855c33

          SHA256

          ef7d9d17c3f751ae982e64036ea97e56e3e984caa2bf98e1a1d91ebdca663854

          SHA512

          ca9b4bf1af6e3b08ffbf0dbe6d34fa1d0a0c1a406b19fd30d1939cb29e2033bb2ca9dffaaa50e29e2a854443d4347290a0bce5e071d48b975fe9a1714ccc6062

        • /data/data/com.doubletuan.ihome/files/.um/um_cache_1703564584710.env

          Filesize

          1KB

          MD5

          10a1d7522d651fb965962428d4fa8b28

          SHA1

          5c941f9ed74f51088943ffbc4d2d17f40627d875

          SHA256

          051c4293a252e1b16ca514a5ac224523c2e4a5750cd987fa058b04675d18d5e7

          SHA512

          791880c5af7c0a40fc360e677ed16e97d3315d483fe1aca8868733c9a272922694a9ed82fad2c854e9ac950599e7dc4391ebd67af89742b3426338683273f0ac

        • /data/data/com.doubletuan.ihome/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          278f5d27e3ab91555bf4b49999a53847

          SHA1

          6cb0b0a80c874da0b7e1c9fe41d6bd67c4410742

          SHA256

          57feff4a9460ad38e9afd87b2e66262bf5dd147590d39fe8b0ca099b1a6261f4

          SHA512

          8568fb78b78b9fb4aecd334bf3dbe2aca983af201daf474a9dc9cff5f01ff4c452d8cd17e94e2d69e3e25b6185fd0731be69f14c72448523fb3ad5d3c627b3da

        • /data/data/com.doubletuan.ihome/files/exid.dat

          Filesize

          61B

          MD5

          3bb16e3dbc46760557017970293648e9

          SHA1

          0692255a9be1306a00643a5abd7dbf68efb91216

          SHA256

          c349da802bef7d5f25db09093397cb74872e2659fb7400ecd45d558fb1778b82

          SHA512

          c60956a7cd8a4f2d6c325e2a85875db7de4d5f507a0815f2e789bc06e32f1518368fe8e56a6305ed1671dedbaed993efc72768c7aa93d49bc29152c935ba90dc

        • /data/data/com.doubletuan.ihome/files/umeng_it.cache

          Filesize

          433B

          MD5

          80c8e17d22ade34dad4087cdab061515

          SHA1

          228510c851734a5accdb5a4f39ff6e26474845e4

          SHA256

          97fd07422ffc06efceea0ff4aab5490ed46ef2c74cdc7321e0e416924901536e

          SHA512

          60d50a4044376b894231c1133c72c9ce12434e18b6e3f1b86b33b2c83d9e132c41d1fb7d8afbe2ab80321e293cdd4200793cd3b5b26751653fcfd074c3a6222f

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          a6fc600e19cc064606a6042c4152fd3c

          SHA1

          5db97b30c15ae523a6b271d41d5de109b6eb2805

          SHA256

          48b666c73a75ccb96b896cac04dee4bcea5c13a04290fda38abe79faf190c1ff

          SHA512

          2645602232e58b41b29a55ff5e731831dad460d5fc4b14e4ecfe485ca4c7685107dba6fefd8590c05a97c4136d00d7660c9f2163764b5bf99c43dcffa23eceb0

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          c4227dc390cda203dcaee187fe68dfe8

          SHA1

          f427f04cb09a9facd8d81072128f07aef8079c1a

          SHA256

          f95b1578cd5e12f34b0b298916dc8dd9b6c4267b9ad8c0c6b3c3357395a64c9a

          SHA512

          d7bfbf85dcf5dd0c88ee8aa7c082a010631e246f240b17ea964115096c10370d4baac74296eba4c40c47a8c5d96f58f2fc0001131e2bd40894dcd414cec7c509

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          795c653323dbb5ae9117e3c97580260e

          SHA1

          c57f20bdcf687202ffe82af1c7c5c06b51b1ca5a

          SHA256

          4157b3fe91aeeb5f6ee29bb8233489045e3dde506d0d0c194794d149e9e7dc20

          SHA512

          574b24022463ac561ea3b43a78ac2d15a7783b141a7a33a4c800419bbd3742eecc94137003d21e2bacaa8a70c200db656ad400e2833483bab7e1c87b38ca5e1d