Analysis

  • max time kernel
    3010762s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 05:07

General

  • Target

    d89a26d73c4adb3377409b7a79ba8fe29d49ee8acf195a47743991a591086380.apk

  • Size

    12.5MB

  • MD5

    fb56e5ebf398afae480ff9798e1c584b

  • SHA1

    f5dc38a8f0c899c2b41280c6bca55058e6708431

  • SHA256

    d89a26d73c4adb3377409b7a79ba8fe29d49ee8acf195a47743991a591086380

  • SHA512

    bdd99254ebc67d4a3b5febf8f61078c8bc0f185e8b2356e84d391d04692ae7ee9e8abe8ed9cdce1e1af6c3fe3fec4447d1b7cc56dfd8c903fe86000b6d94e5f8

  • SSDEEP

    196608:9IfTMur+TGI2AS/9rdNNlPrI9/yVYHolLviE46wdAqWDEdk8xqaHdmsogXByhvN:9uTMuiCIkJ3+y94Nd1dkMldz0

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • net.yunyuzhuanjia
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/net.yunyuzhuanjia/app_push_lib/plugin-deploy.jar

          Filesize

          202KB

          MD5

          610ae20fa40cb991ef4670582bc3996a

          SHA1

          bad8dbc9b7226fbd4f1b97dabe777c36605ccc9b

          SHA256

          010690c6a9fe3d6e21c33940453cb2a5c41e26ac24ea42e3732111613701eede

          SHA512

          8584fa3850e97276d6afef61dff9401531cd7830a3a7660fcc3b75c21c55196a59efad46ad763f1695f59c99874e29aa285ba9d9f43a5989d004a0e115d76b1b

        • /data/data/net.yunyuzhuanjia/app_push_lib/plugin-deploy.key

          Filesize

          174B

          MD5

          86896cfc29159ebebbdc72a7fea66d3c

          SHA1

          76f71e17f279e9010cd1f16d9c979f75bb9cbdb6

          SHA256

          4040246e2cd23768965dd2720eed8ab30b0891eb7324201ac1592e8e39eb7697

          SHA512

          89d4d3e88c41bf4c9cd527ed6c7af45e14545019b1d86414fd7965fb6dac79a6a8f1e8c4b4de4503e6bef2b98ad32f37d319c7e29e807b2b83d56cd867ab9ca6

        • /data/data/net.yunyuzhuanjia/files/mobclick_agent_cached_net.yunyuzhuanjia

          Filesize

          197B

          MD5

          b27b06969bc2c983d00ca86f3a13d65c

          SHA1

          804b5a06d1945d68dbe0f2ed627a79f7ffb844de

          SHA256

          067058ff12b58289b579264ea980916ed05b31c6d412ba176c9d8dc60418a428

          SHA512

          e1c6ea7bea22e070d40abb3a562efbdd2fe86245390ac271cbb557270aa1240bd0228046a324228db012a9c61d3e2539b0d083c208ce6a5ca7e714ed4367d119

        • /data/user/0/net.yunyuzhuanjia/app_push_lib/plugin-deploy.jar

          Filesize

          507KB

          MD5

          058c9e49195a1ab48863deb84a028f63

          SHA1

          a35b0dc7822174cff3683e1aa2b5cf85833733df

          SHA256

          ce04c452c6c3dc56dee78205f036a779c7144eb607dede07aa054f93f77ad049

          SHA512

          081643598f3bbda4d2f560975f6e6fec8da94c8a578d80c05cf6f035ed3766db65de21cbe3ec92a16060e5ea1c1aebe37bd339de76365daf67648fd5967e5c47

        • /storage/emulated/0/Android/data/net.yunyuzhuanjia/daxiangxinxi#mmzzb/log/20231229/000.html

          Filesize

          85B

          MD5

          40ea6f531e259aa0153f26c5efadf25b

          SHA1

          cf8c73822d762d3440af5cffc0b720882676a5a3

          SHA256

          2f4b2551efaf3ed7c5a291ecfa8417729b7423f99094782acbfbb52d63ecaa57

          SHA512

          053e948454029a7c88f01c03541571b34e61721cf56263775287d80ac3079fc07cdc4c184897d65f1966d3dd147d4a55198fb8305d215c2159ab65b663f721c7

        • /storage/emulated/0/Android/data/net.yunyuzhuanjia/daxiangxinxi#mmzzb/log/20231229/000.html

          Filesize

          82B

          MD5

          2ac604a154dc18f0cc0c25c4fe353f15

          SHA1

          cd3a7517561f8575a799b1a6a30e8004271e1e06

          SHA256

          4c83ab2ba42717347a1f12f613e0b801d05b9093a1043aa0f268fe82d9d6460b

          SHA512

          fc6f5ea13d1d04ad229840306cf19087d4fa15e76d2cb25d52a1aa9dbd2df3e5b490135f18e87ad989e7c5154364a7e1ea3999ac309535698fdd6c85e39d6c4e

        • /storage/emulated/0/Android/data/net.yunyuzhuanjia/daxiangxinxi#mmzzb/log/20231229/000.html

          Filesize

          113B

          MD5

          012450b41bfa0e078831794c05b3daa4

          SHA1

          e23b44cb093eb6df301afe937b5256dd3738896e

          SHA256

          4c3b58461a4ffe2d598691ff567891094a7864a7138c85ea00983015dcd32bb0

          SHA512

          852c752e915b049caa08214c9d6e0a216eacd598a725b4ca468ff7607c89aa1495b38455270854edccb7b2b921210d66833838f1df52dbeac39e7961b5c46958

        • /storage/emulated/0/Android/data/net.yunyuzhuanjia/daxiangxinxi#mmzzb/log/20231229/000.html

          Filesize

          905B

          MD5

          db75868e44c9a4cc716f29b3b2dfea7f

          SHA1

          8f9fa27691e6e2298b1e5a8d721bd4cae8ea0cf0

          SHA256

          d6f03477eb6ac7baab8379d39137d81aff8c42d895c895d816f2328af8fcd4ce

          SHA512

          2181fdde2bbe4dabada43147fc3214d86854af73b26d2798d0375361ccd418d1413b0f098e361f81c7af15e4ef86e8943741cfa34470cff96d7792587e259433

        • /storage/emulated/0/Android/data/net.yunyuzhuanjia/daxiangxinxi#mmzzb/log/20231229/000.html

          Filesize

          172B

          MD5

          aa0b0e9747dbee954e611502e0767d9e

          SHA1

          fafa7fb09f4201d97f2dd7655be916c4597f97c8

          SHA256

          c0799f34b85966a0c674799a36f3441d48b0d0073e832683e64ef307d763711a

          SHA512

          acdf098560d415bd0ac35668a2e723329ed1d1f08e614b95209719f35e766e303b01a3c9ccec395efbe83737ec42a6f849415fa6fa9f60487810dee3182dc581