Analysis

  • max time kernel
    2790601s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    24-12-2023 06:36

General

  • Target

    e936c819d3851885b1f7c5fdbdec4f9c21405c28581ebf6ea1cde1440e12b895.apk

  • Size

    6.2MB

  • MD5

    2bb30c3466055f227447e7dca0778baf

  • SHA1

    c3e28c5d04e309217dc31951240df754ecb95516

  • SHA256

    e936c819d3851885b1f7c5fdbdec4f9c21405c28581ebf6ea1cde1440e12b895

  • SHA512

    d7cb70d1baa8e684d302262ea25135bed2da5a9d714016f304388d262142028c938be42315062b0ab65ecc6b5b215d891d98721011723dcf9420a7f7ee7404d1

  • SSDEEP

    98304:eHzOZbnpn94Gb4gnfoQfZlP/FMwtzqICgddFxa6XDb:MzOp97Z9awtTFxaI

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xjtu.enet
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4614

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xjtu.enet/databases/dhdbname

    Filesize

    12KB

    MD5

    2e8d2b7e3b1a8758ee427d301314b7ef

    SHA1

    32bcf7c03fd4934e1224feaf2114df2ae56d0551

    SHA256

    67b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d

    SHA512

    2a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f

  • /data/user/0/com.xjtu.enet/databases/dhdbname-journal

    Filesize

    512B

    MD5

    2e34c858c781c7b7c562d84726306592

    SHA1

    e7980402da1c53b5209a97cacff7254b87c0e279

    SHA256

    8304f5b6086a086f256e56e89a00b76717ef833b847ccaaf60b886730c47b453

    SHA512

    54d1ee171f87bad013fa5c658528cae09fcba28d5e3e4b9d9e1127dac748127e53760d1866e13c3206fe355890fe01b2f45496d27d2f99caac81e99e79a279e3

  • /data/user/0/com.xjtu.enet/databases/dhdbname-journal

    Filesize

    8KB

    MD5

    e36c0ce9c496969f690d734cb55521bd

    SHA1

    eb87410095802ca58b86db1f0f9ba035a2bccdfc

    SHA256

    60425562054a2d57fcc37cb07590a90f97bf5f1c72d94115c7cbe6f22b1fefe8

    SHA512

    6f6c68763b9c82e82734301215a912dd6e9c43b191bf203fde7c8001a5f24b6ad768562e6135f34518dfed4516855582671b6fb0c5138173d4232e6c611fd9db

  • /data/user/0/com.xjtu.enet/databases/dhdbname-journal

    Filesize

    4KB

    MD5

    8389ec33b562ac3454046fca4099d9d8

    SHA1

    68e7c135481f8ba53b26008cdaeea4c7d72cb90f

    SHA256

    0baed3adaf3f9280e4b124101caefa2f58b3d66f6fa2b9157fa92cadfda39439

    SHA512

    aba618f8824a4180a4e69b73bdc5cc809cc4a87fcd5bc3d985a45e7606e19538efe17bce1d34072a68091e84c52aeaf956a534c4912b2a386f1bc05064277f0b

  • /data/user/0/com.xjtu.enet/databases/sharesdk.db

    Filesize

    12KB

    MD5

    1189078400d4efade3bc90820c586543

    SHA1

    8bb31e747a44a05b0136daf62eb0e476aa0b09b8

    SHA256

    2bc30e3ee0aeddbe3d458a871f434d87c6858fd889a5ce820fbfa1ed5402e871

    SHA512

    a15c10807930bfbb7fe2991e9931af2c1521b6be2434d59958766d7062591bd17ad57bff941a8a574f93a2b740c18e628bd248ee94e41867d2d6510a5c3276b8

  • /data/user/0/com.xjtu.enet/databases/sharesdk.db-journal

    Filesize

    8KB

    MD5

    339f04ffbd2886eeb348018d7aa14f79

    SHA1

    c11a0e5ca94d759338af0b44b6ee05163b95ae71

    SHA256

    cadeb090eff7bba62eeb2e5afdf66a679c45d44f118c9790bd12a9625123695b

    SHA512

    162a79eac5b73c41f073993f820b24e0498c222c98af60552e4840b9f8fd0d0bc8db939a363a9d9d1c907c01608afc170c9a762ccb8f507404f5aad4b1b47475

  • /data/user/0/com.xjtu.enet/databases/sharesdk.db-journal

    Filesize

    8KB

    MD5

    a50531f7ba67eddfc82435929590859b

    SHA1

    5825b983eae2f86c302f53318fca34191b257f77

    SHA256

    a04e8a63d1f1480689439037f3adf3f5a98159218cde1ee1f9ade35493efe524

    SHA512

    29a447b62f18af7d473db6a8d0255a2b2353f8f134337b3f6633de4d03c2163eeb99baba452667125cac6c2547fe54cfaaf3301dd9fd3c3bee76d8b11fc8092c

  • /data/user/0/com.xjtu.enet/databases/sharesdk.db-journal

    Filesize

    512B

    MD5

    c7ecdfcd7266e0a49377c6ef434b647c

    SHA1

    db29cfc118d4c36d0feb3b7df26b3501a76195b8

    SHA256

    5db9d487298a481509673517f01afce1ad7e69a0e65bc22fa5d1eebc43b032bc

    SHA512

    c1d8940a3b0ab88228db52b9e2fac9c662fada7f83aed572af25f7b57aa3bdf3453a33ed9d53a94af78d792e891ea7e3cf5ef91f9414933bf0e2b48c4371ff15

  • /data/user/0/com.xjtu.enet/files/umeng_it.cache

    Filesize

    245B

    MD5

    cb9e4666bbdc400b57694db07104830c

    SHA1

    8ae5e3473347135af72d8364e890eae41a0d4dd9

    SHA256

    6d43c2a08f63c3e07b3b6cdbf2464338355ccb3727ae384731dcd3272052b05b

    SHA512

    2a9dad01f910cbc1a042ed620a98bc3757c1e84dfc4d37fb7aca9187addf27e5ca96a496241aa01597e740b306642cab74af3023fcb2da7d4541a8a0f0781ff0

  • /storage/emulated/0/ShareSDK/.ba

    Filesize

    361B

    MD5

    ab63abacda8258bfeb45d973f6e64b30

    SHA1

    45e3ec216b35f87358b0dfd1c927978bdd233b9b

    SHA256

    6e8f61b617a9f4feb8f9fdcbdda161d638b6db736cc21bb7162f34e7f5725898

    SHA512

    544e6c0c4a66bcb61b620d46b5b64be1a2bae2e9def0d50bece7d0d10a29702177287e3e96e72f7fb290b81e64c5044c2e11284d5b3aad2c6c8f18f06850ad7f

  • /storage/emulated/0/ShareSDK/.ba

    Filesize

    460B

    MD5

    46c1a0431237bb5fdae0f6283ddb6934

    SHA1

    445b6bf382c9c80fb4a7d24a29978460c4718c8c

    SHA256

    c8a7cdaf633f91a3de6fc50ff77763bd996f8d717dee8442a5b8b532f4ee6915

    SHA512

    63916ac3ab2bd6f986f9e49343e8529c6a1d39462509649880b9d6f47cbbf1c9386bbc7201af91987c921d3e19a866114110c8de348e5335d71a1deffb354b67

  • /storage/emulated/0/ShareSDK/.dk

    Filesize

    107B

    MD5

    893bb9930a6efdd3211826f4114b5a29

    SHA1

    57b8895adcc3bbfec87268d5f004cdaa6caee8cd

    SHA256

    45e6cf5549bc12c1150b2a10f20de32ec5b86fe23221536eca2cb2a43b1e2d21

    SHA512

    78f094bf00c6b440a57dc5b8edc10c3abf4fac63176dd64a54b2e7b03d9973485504d619ae80312fed1bc72db9f1617a990f37edc7bfdfa032ae47b054939010