Analysis

  • max time kernel
    3010358s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24-12-2023 05:05

General

  • Target

    d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9.apk

  • Size

    17.0MB

  • MD5

    167bedc95c57e3ea9bd45dc6b3083676

  • SHA1

    26d3f4abcbdb43de5216dc5c60927948128fda6f

  • SHA256

    d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

  • SHA512

    759882ab8541d5c834eb97e1dee15b3aa84b4c381bb3efabdfc56fc20fef84e21b5fe31ddabea77fd4a5ffb2d044b34ef779c6a2e3fa952595f14068fed4c6fc

  • SSDEEP

    393216:RMR8nWJyXg89zWRBU/WsqBTV/yEoKYJdE4CmTYlHKtaAa:RT9lzOBESuKQdC+YNKtat

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.wistone.wstc
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.wistone.wstc/databases/SafFramework.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.wistone.wstc/databases/SafFramework.db-journal

    Filesize

    512B

    MD5

    7cdd3a914f3bb0f6e7f2ba9fb9a93397

    SHA1

    9055962ef40b634273d768934a08a6e80b8348e4

    SHA256

    85031c710209ba6d64390c4becfd9b5cc1a1d7e0ec189619c926854fddc46f89

    SHA512

    08d11ecf5252277143160676d08d74d719a5b9bbc7343cd6fb9a50ae406a5aa12df0081fde14ad060fa177ef83398cab65ffc378ce096df83d9551f26bc598bd

  • /data/data/com.wistone.wstc/databases/SafFramework.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.wistone.wstc/databases/SafFramework.db-wal

    Filesize

    32KB

    MD5

    2ab8700b796330303598e9052cd33280

    SHA1

    6e7833f5efff7104a2bfa688b5faae67c04c6893

    SHA256

    b3635b5dae88a970c9ea501fc0e11b04a56c8e98e8536a7d94f3987d399a59da

    SHA512

    cfb0f96de534ce2a6f05e79f64e8b17dd42e95807a5c567261b3026c7cebf56da2a8c637a148c9161061662518d2388f8ffab470ef06192eaf4a71ed74695cb0

  • /data/data/com.wistone.wstc/databases/license_data.db

    Filesize

    32KB

    MD5

    325e9a435517db31a2066e3f18a47f2b

    SHA1

    7fd33d196d485d047a6ccc4505814c7a0510e77d

    SHA256

    f9ac027537b84e4353d3506cc56332047a64f766f826be7878d98619237954c1

    SHA512

    11a2180613c34c44fe9d0ddd5684e6732e2218ac9a7a0b20affc9cfb8f20febc69d159e6ee9ece490b1d920e3ae4bc58d1a2ef6c4cb40c6dc6ea9bf7649a3848

  • /data/data/com.wistone.wstc/databases/license_data.db-journal

    Filesize

    512B

    MD5

    d6f285d3f253f1e71eff663d5ba496ff

    SHA1

    3ddb21f0863e1bbe82d2ea21f08ca3175e35b801

    SHA256

    c202bed963fe80ad34bc39de4b03ef4b5ccda14db20472b9ac66df3851fad83f

    SHA512

    4dac133cd86849db59ce39df36d62cde691366c626e5ccc868369f0b1837ff09a55bf1865102351f2a9b38405ef956b05672a9ddd4454e939e3430107007b002

  • /data/data/com.wistone.wstc/databases/license_data.db-wal

    Filesize

    44KB

    MD5

    1acd0a1bc1734ea220dbf49909666e05

    SHA1

    c165d329b028aadf09a0ca6ae2a7360e1b381c90

    SHA256

    ae8ecb340ddcde9226713a5ab5b3d4129573e217663a12f466728bc22b2de5aa

    SHA512

    1fd361b1f0dacf0bcc09162a37834f7693827fd5cfaf9f746b97bab28ab9d15241d3967164b505f93100ff1b75903de3d83900c862df225a6671267fd5372658

  • /data/data/com.wistone.wstc/files/iapSplash.txt

    Filesize

    3B

    MD5

    c6f057b86584942e415435ffb1fa93d4

    SHA1

    8aefb06c426e07a0a671a1e2488b4858d694a730

    SHA256

    2ac9a6746aca543af8dff39894cfe8173afba21eb01c6fae33d52947222855ef

    SHA512

    bdc247a1a0e28a586ed40744d281993d519abe981aaef33277d4877d167e1150816e9723d068a59509991ed0cdd8c5cea0f9ecd0ef23664db7cb85db5a0dbe12

  • /data/data/com.wistone.wstc/files/playerInfo.plist

    Filesize

    331B

    MD5

    670e5624faf97258fd72c445e745009c

    SHA1

    b209522678f7eb21d4f6cf89f28e8ebbbeb7ead5

    SHA256

    cd05a98899d311e521b9d4a35c0753e5242b120eb8486d15e82a49a2c924e399

    SHA512

    45329f9541bfe58c40bc3521d2073aa5f5549e63dc6a5f438d20d2c0c6c63aa49333ac1cec301b0866a8edb5ace4ae35505b37e75b0ac60c9e4105da8816583f

  • /data/data/com.wistone.wstc/files/role_names.txt

    Filesize

    2KB

    MD5

    ee79f4c118c5334387babcf17636e923

    SHA1

    7b84da8ba5c9b67c2ee337c1bd00f5d865d76bbf

    SHA256

    7d507030fb45baaf325be04588370510e38a3f2e99e192b62d9e9b13d8f7bb7d

    SHA512

    7ec5996b5c10900a7937c50f4b21d018546ff69cc0e74848252c6f5d7a4781ce63c430f6ab3e5734aa302b0e33426557b138590330330bbdfba0a730db68b21f

  • /storage/emulated/0/InAppBillingLibrary/log

    Filesize

    90B

    MD5

    bc553ddc613cc2f4e7ebb2058cac0fc8

    SHA1

    85bac44af1aa8023141856531794be5951511531

    SHA256

    b24bb1d3f0f5610e2a405f5f15048c5bc06efd229c3acd9db7f63c73b902764a

    SHA512

    8e097df0c60f83048428526ec25b3663730bb0f96494d4ea853b3092449dbf2718aa13478b8bf3b70140bd6c95ee933ac266dda7ef063d65ae957a228fce3305

  • /storage/emulated/0/InAppBillingLibrary/log

    Filesize

    91B

    MD5

    368bba66fd165e591e0312b4ef4e38f5

    SHA1

    560acf588639c03761e625fd002101294d1a0ed3

    SHA256

    a99a9a557a777f39659909d91110e411155edd79c1ea10db2ff0400fab3b112e

    SHA512

    a2a50807019f01297840919c1fb6cacb3af5cbfc0a8cb497687791e0e320b2f8a0c145b5f5352af4c6c9bdca5dbd34f7943ed52f39b9c8c28ed113e287833ea1