Analysis

  • max time kernel
    2777505s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 05:27

General

  • Target

    dd35d6d74c6ccef91ad30fa5098cb99f0fb232470fa6c2f4383a6d601d367985.apk

  • Size

    7.7MB

  • MD5

    15368af13d42c97fa46c4c0109d45fb5

  • SHA1

    65357c4614e10a40196c65f0d529f480fd6a63f9

  • SHA256

    dd35d6d74c6ccef91ad30fa5098cb99f0fb232470fa6c2f4383a6d601d367985

  • SHA512

    1d41c508dcd94244ab0762b531c65c95e64f26f448b087f993b3258268764c95f5c141fb9af476516205e3f109ee3a68e13769778079be6588b03a631fdfdeb8

  • SSDEEP

    196608:bBzO5AQtxFJ+x4+xIlwxtGxNFH4eA6n2u+ygmPqnqnw:sASjJV0IlwxtGxT3A9ffijw

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

Processes

  • com.yc.wzx
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4994

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yc.wzx/databases/npth_log.db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.yc.wzx/databases/npth_log.db-journal

    Filesize

    512B

    MD5

    7e5f30aedfe2c7645792d6b2a240ec93

    SHA1

    40c885577732c90384c329059fbc062a57d60a5f

    SHA256

    ba555fa4076a20e33883f7a88365e16ea7ec8077abb4fc30583ff7d8aac2f742

    SHA512

    aa6abd20dad08c3b0ab1ec4347f437e7f3a88dc366a497e9199be313226a7c11c87d30c00ef1daeaa6de593a36e72aea4b3859ec6990aae7c44cec83d084efd2

  • /data/data/com.yc.wzx/databases/npth_log.db-journal

    Filesize

    8KB

    MD5

    c3b74cfcaecfe2eebcfddbacb4016289

    SHA1

    d5c7a9414817fb3b02f2aa3fd4b299ea7160b31f

    SHA256

    6d772c30f4cdebd206c5d569ee10b10d80d6828b220599f36c33772818a501c2

    SHA512

    83e311fd5461f926d66808dee02f1bf7e2f199170ed1236fbd547dec546e623ea76020f367d243a6f8e7ff3af9df244870d3c1298786f6721d0df99279d45261

  • /data/data/com.yc.wzx/databases/npth_log.db-journal

    Filesize

    8KB

    MD5

    e8f923e7a10973c60e175be5427b6d41

    SHA1

    60a6db15ba6dd6ed16ce0874c657e198dafca483

    SHA256

    aee47f13111f0d6fa83f3897968a77987f596e3ae12863ac9e4ca3a75a9cc7f2

    SHA512

    db8fc02097eb12befc1cba9a9e5d2d5ce6ee5f06cf8c8c24508afcfcc23a7acb50de81a6f62b6d498716edcb46329b8853585193238a3b1bd6733253d03f33a1

  • /storage/emulated/0/Android/data/com.snssdk.api/cache/clientudid.dat

    Filesize

    36B

    MD5

    73ac28cf0a0cd1249751e0dd49c7b074

    SHA1

    9c2c72aecda58e55b6e5f98a839306e20cf001b9

    SHA256

    d987c45a0c64747662a5513b882de836afd0a8dd56e0ac641518bf9c18ec249f

    SHA512

    efc9da5bdfc7d6f04315a45f457f586c70544935e8ba25ed722f6c3b47b4c664b851e97c36df011beabdf04a0c9eedeccc40afd5f465d8b88cb5c90efcc9a06c