d3e2a013e3eb2f8eb96c11309ac3cc61caf825d1752fb541d6c41da1df2b7461

Analysis

max time kernel
2999230s
max time network
148s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
24-12-2023 04:34

Target

d3e2a013e3eb2f8eb96c11309ac3cc61caf825d1752fb541d6c41da1df2b7461.apk
Size

21.8MB
MD5

0f87a6bf26d3918983bc4c01ada5c228
SHA1

ece35e2ed5cb286e4cd63466b907262fa8c9f120
SHA256

d3e2a013e3eb2f8eb96c11309ac3cc61caf825d1752fb541d6c41da1df2b7461
SHA512

3f24656139e85e5ce30a49b01ff40fc72b2ff215dcf76170d96c5cfafe048d3a95d25b1903b31fc3b042361efa9d7afa5e00505a27a76bff970b41b1c266f844
SSDEEP

393216:SZl7bJMEbv5FZPLN8M8oiD7yafYGCDlQHrbVM+1fwtaaZVvFgAYC1hRjsvPQ+:c+E5XZ8JfinvFgAY0hRjiPV

Score

8^/10

banker

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 6 IoCs

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju:remote
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju:remote
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju:remote
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju:remote
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.owxo.gupiaodashuju:remote

com.owxo.gupiaodashuju
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4262

com.owxo.gupiaodashuju:remote
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4330

com.owxo.gupiaodashuju:remote
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4491

com.owxo.gupiaodashuju:remote
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4526

com.owxo.gupiaodashuju:remote
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4592

com.owxo.gupiaodashuju:remote
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4714