Analysis

  • max time kernel
    2796054s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 07:00

General

  • Target

    ed63ca44322c08c9fb4101620b968589b74adf3bf0063ae21a36ac97b79f5465.apk

  • Size

    15.7MB

  • MD5

    a9a9a389d1f430e7b5b93dac9c7eaca7

  • SHA1

    3807a877e77d9ebbc851f3667b2ca0ad87030439

  • SHA256

    ed63ca44322c08c9fb4101620b968589b74adf3bf0063ae21a36ac97b79f5465

  • SHA512

    e7ec73b727f049510eb0378d6b0d090699b8216bf63cb346e58ebc67cbc629fb7361e9ce1ae0f57292d7f2a4cd0df0d885308f136930ec70b75bea87298687ea

  • SSDEEP

    393216:lWD9/C6hwuqH2w0SPQCIUTeUJ6eD6dALeze8Ue3bQ:lV6C/yWQCXe+6dA8o

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.bzPaiPan
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5112

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.bzPaiPan/databases/RKStorage

          Filesize

          20KB

          MD5

          0e72eb7af758379933df475981fa447e

          SHA1

          ddd6e54084b247d26d9e07bc060af902893765ed

          SHA256

          783b181ad5e6d50d16ea508a65aaa863be5eca89b6950a8ec2d8d9250d172427

          SHA512

          ad1e4a4a2e302e9aadf7c51a3f6d64aae514440ebc4409cc2bc4b117ee16c0ac838edec7bd407d347dce46d0cd1b7c2a835aea6f90636ac9983ef7c6518d1730

        • /data/data/com.bzPaiPan/databases/RKStorage-journal

          Filesize

          512B

          MD5

          e754dc8e69687f436f5e388314fbf547

          SHA1

          b8e79f5f859752ef7ddfe47a099e8202592ae054

          SHA256

          4ba725b7a32b7054be83ab8c3da7184a5ced7096e471e8389f519defe0c79966

          SHA512

          1c3d083e342d7822c19a6e848faf08ffb02155e4908fa6f342ad536f92b7970bf73df30c87ca3c1583218b1df60c904f75adc38f040b589c2f0f6a662e12670c

        • /data/data/com.bzPaiPan/databases/RKStorage-journal

          Filesize

          8KB

          MD5

          2c807dd6d95426e1b8ea9c309cdc4c19

          SHA1

          9775d12124753ecbb708e3707ee18e157feed50a

          SHA256

          694f5cb07d1859a04f405b0973e507c3637fc49dad10de8f0ea4f431ac8ff1ad

          SHA512

          6e040d73a4f63defe042096656a69a4a100143ede9ab82fdc99532089caef5bbae694c4e37a103e4bca8170519b877b031dccba5e647fde60c0a9fa6cafb320c

        • /data/data/com.bzPaiPan/databases/RKStorage-journal

          Filesize

          8KB

          MD5

          dd4c195471c30b22525c43337c1e5a34

          SHA1

          6a7beb53ccd924ccaa27c31122b16c776284a66c

          SHA256

          7a32056b5bf38d04c4f1b82970868c32c8b859cc4abdad75e01eddd1d8fe9953

          SHA512

          26aaebe3a15b3c831966aadc858ced9b0c6ea09c44f4f50b435e7cfc899162b7bf6d1fcc1d4949fab45c4cf0d4c58f79e1f3ba2bb38b210c1498e89c2b3d2c95

        • /data/data/com.bzPaiPan/databases/RKStorage-journal

          Filesize

          12KB

          MD5

          84fe7711b5d0480cb11f683710a4c020

          SHA1

          87d9b01ee4d77a6f8698a294b015d0221d91439f

          SHA256

          7d956794e5b785eeef9a869b4ad98803deae989e19a8f459871cc88075e8ebb4

          SHA512

          23b8f669a6949a4b63d914d34aa4aad8cd6cee3754f94295b8aa6607d5f528a5f5bd66fd7c7b41063c8419f4ec6e66784209400ef15fa5e01d83088815940358

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db

          Filesize

          40KB

          MD5

          7ee455eb4a7a9d010fdd5ee90810916a

          SHA1

          1e19ba9ea8f84dde44ccac50bb5f692f7886fd9a

          SHA256

          1186a6ef08fdc2051f243ed16fba43e2109788a0165f7c38eed0798aa4df8e9a

          SHA512

          f5f1c41a27d172dce891d1ae121bedb53fd57770cf26cdaabf99a8797ca03103748065d9918c66d14cf8b08842d387b5ffa186d5bbfe1c255b94006de55b70c3

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          512B

          MD5

          ba7f3ee49f4de8a0e025a759ec8609fb

          SHA1

          652f2dc2ec0edccf74d01eb42be76019d9992864

          SHA256

          ef300d1e85300333b0cdcb5f63d7e6dc89b4b146e171f5f327eacfa6b8982985

          SHA512

          ae79dc2fca2113b6d6de7a465bc87b35c11f35abd03016c5cfaf73967c10da08df594e73ff583164476510fd9a38f9950d2dad1d13ae7bc963453147e4e74f1b

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          8KB

          MD5

          9edd83108556c2cd9c17ead032cdd970

          SHA1

          81e06df2266f699092305d9100fed843f4e51c47

          SHA256

          aa7cf5a28470c193104527fc57d9d10bc129674dc3aff69ea25b135f3c8d4a0e

          SHA512

          b527fc39278280608b8665cccf49d24964f96476b86453fb01da54341c7ff8ab732066bc9d91af35caaf4b8edef75a7d6947272062d1803e5443ddf13fcbbb72

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          8KB

          MD5

          b195330b52823045ce216e482ac8d482

          SHA1

          5dc98b8fd1f30a548339c06c8de9583a9c13e1f2

          SHA256

          d120d60efc79af32d0ef3e0bb76eeae17162315c8196638fae92aa7385d4619b

          SHA512

          697c2323678c8f994a5a559d8afb0fdc28b899342039ecef75dc9f78701b1641dd725e79fcf00c81f3416992f4df4a3b961fff02faef5092d63a824aeba46ed5

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          12KB

          MD5

          ae3bc2790e25706db20ae5edb3f2bbfb

          SHA1

          88144e6850d9a9a6b685b2d1e5855b406801daab

          SHA256

          a6308ea537a8fb5031e2c26e28e0dc81785f5a6da981f241a05feadb4b7a619b

          SHA512

          34feb273835fa40d39469c3a2b3e25ffc4cb68000e3e8238659b97354a9dab54bb677e73faa8c93f915f20e37db240dbb5b613ba2b6733f51bab37b06b54ae80

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          12KB

          MD5

          ef398f8217843b2288608fd61e545a68

          SHA1

          1248bb54599d8ec499cf0c500cfe13c65c3c3262

          SHA256

          41fae87ad993f2a94f8331374cbe4c7241faf7e7c11535c0ddd14d1571aa88fe

          SHA512

          99b489c414065f586fd4bffb9bf2e1cafb63771ba03a3fdd190c0c86df3760afa0cb3a8f30784b1c4ea1f216f9c10645d2cd248ae5d9321124a9b5e21beed770

        • /data/data/com.bzPaiPan/databases/tencent_analysis.db-journal

          Filesize

          8KB

          MD5

          0b5bb172704f745c3b365d6ecb29a160

          SHA1

          1d56522be75003fcf277841afd159a92348f6c06

          SHA256

          08717353c0d077002d2d205a54468a988f422737ce670558cc9fbb4b227984d8

          SHA512

          dd4b16a5cc4f41b5f45a150d8b347dc34cadf3bc94d80027f3dd93badd94ad5556eae1e12d151b80f8ae431ea4f492a943a6683a8cda866f01ac5d17e1b3d463

        • /data/data/com.bzPaiPan/files/__local_ap_info_cache.json

          Filesize

          2B

          MD5

          d751713988987e9331980363e24189ce

          SHA1

          97d170e1550eee4afc0af065b78cda302a97674c

          SHA256

          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

          SHA512

          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

        • /data/data/com.bzPaiPan/files/__local_last_session.json

          Filesize

          133B

          MD5

          d6a7ae01d59f48b8fad31ce0aa771406

          SHA1

          1fb8c58b6fa951f9c116869c679a08f250d84cde

          SHA256

          6a92010ee5552c69bdee574896d8ad592a03aef8d9a15213ee9b72052d854b3e

          SHA512

          2936abaccb3d15f5eaeb1a44faf9f57e508e7350777696b09d8a753cf4e639fb7950c8750fe5b8a3af605dcf9b45110e08b63d099ddce82cf76ae90717408ce6

        • /data/data/com.bzPaiPan/files/__local_stat_cache.json

          Filesize

          569B

          MD5

          dbbe6913fc0215c8967962a9e361a39c

          SHA1

          12178a14a3864e1dd8157ad94a475723cee3b1ea

          SHA256

          50f33097d7077147fc2fa7be45aa191e0cf60f6c1c7bb6c92399ae888ef4fe40

          SHA512

          d1da0ff91f79fb183b0ac49cbfad63f5374c41cbd20b456020d5bb0a57970a67900eec13396e4b395bc21bb210b80441e59be696cc38cf3668a1577888fad01b

        • /data/data/com.bzPaiPan/files/__send_data_1703603063976

          Filesize

          757B

          MD5

          8892d4cceb1e62d8254ec26115d6d0c2

          SHA1

          cdb3adb94d34808461e65e32f4dd5133c58c59ee

          SHA256

          0bda84147926d79f4e4f830b222821046dd8decb8d9ecc5df41fcfc92e92bcf3

          SHA512

          2b41b15ae18fc97a5883bc360092cb240bc0da7c44ed86aac58ae2fd7e481b64033b0a7d5e15c7258cddc88e2ab283de7863a93a36d86f26117b6cb409328de9

        • /data/data/com.bzPaiPan/files/com.tencent.open.config.json.

          Filesize

          1KB

          MD5

          f526172de1566b34fdcea744710d9559

          SHA1

          000cb54d9a008a807a1c5a3fd2b2e7cb41e7939d

          SHA256

          8572be02b59f4d514000939ec04a9b4e2380c55265256b724a617d8d0f4c6940

          SHA512

          dc81f0fe345b18c96b1638c67b9ef4c5e60059dfc4a02f3c30a23645d4847abeef46cf467d044c42597115c48052ce0e8ea24328382114a544c5dfd039a95e7d

        • /data/data/com.bzPaiPan/files/libcuid.so

          Filesize

          109B

          MD5

          d7d3f62c76a00f73f00486450a14b828

          SHA1

          d43548738d30b7d608a24edd039ff4b04b6fc832

          SHA256

          b361c1e1b9545f09f549d249809e95920c68d00a4b626e43fa30e1b60e8deb64

          SHA512

          d03d84e31d181267060e9a591215b3b380f0a8b15cf50988e34f61775d0f3dbf563e29c03bc061c20b5ed8c00fb682f52669727e59606692c4d6fe5e7eb7c5a8

        • /data/data/com.bzPaiPan/lib-main/dso_deps

          Filesize

          132B

          MD5

          c8851549e225df037aadd1deff18e513

          SHA1

          5b3b4a68d775f38a7f3efbac28fa15e39f036e62

          SHA256

          ae200d944b196ecab982aa374c89eee2f925ac7b8c9e26803329d49e6b8b20c1

          SHA512

          f7c779bb26047e61de13c9413df9850a72dbb3fbf62b471f30abbd7f1b636469dfbf53ae660a722640ee764f86eaf1a48287f2b48cd4c206d206824a8c32c3a2

        • /data/data/com.bzPaiPan/lib-main/dso_manifest

          Filesize

          5B

          MD5

          c06857e9ea338f3f3a24bb78f8fbdf6f

          SHA1

          c5a0a2529d2deb60fec041b4fbd722a2ebe31702

          SHA256

          957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

          SHA512

          29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

        • /data/data/com.bzPaiPan/lib-main/dso_state

          Filesize

          1B

          MD5

          93b885adfe0da089cdf634904fd59f71

          SHA1

          5ba93c9db0cff93f52b521d7420e43f6eda2784f

          SHA256

          6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

          SHA512

          b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

        • /data/data/com.bzPaiPan/lib-main/dso_state

          Filesize

          1B

          MD5

          55a54008ad1ba589aa210d2629c1df41

          SHA1

          bf8b4530d8d246dd74ac53a13471bba17941dff7

          SHA256

          4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

          SHA512

          7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

        • /storage/emulated/0/backups/system/.confd

          Filesize

          12KB

          MD5

          6da302a2e5fc0263420684f38a00e3fd

          SHA1

          9e1c35e91c3b84600dd8ebc10e072ccb91b5895a

          SHA256

          a9b2f6227429fd83edc4db9e62c5e3f8c45b55598f7b10c3132d6b339283c8d2

          SHA512

          6e91d3076e4f382a5e4119e6429b90bd4d604c858acb4914e8b67226f4ad0626e29726e09d12965f075ac6aebc49eb22faf0f5c6a286913aad9515887f91fa1b

        • /storage/emulated/0/backups/system/.confd

          Filesize

          24KB

          MD5

          8f198adc65fd27fa2aab4678c72e8ca6

          SHA1

          cde2e2d31747def52da4a9fe9020db12d0befcdc

          SHA256

          e7c3d408ac16c3d4a6fba14a65eb2514671ba4c22b0b8948f6d7217468e7cbce

          SHA512

          e71e2da7632ad2e2214e5a868840ce37f52e9f8cec6093b19b422dd947311e511a6611c60f1740655d0491d54287364a363e57f55e39bb38b8b6e5da270e1a19

        • /storage/emulated/0/backups/system/.confd

          Filesize

          24KB

          MD5

          9a6cfd32887211712fd4614280c8a17d

          SHA1

          f26c041da27115ffa01dfde310d57e2cca28cf23

          SHA256

          17071a99e2c3991d315d51b13b1f6527d24655e4b3f6d1a8b84ee2c508704e43

          SHA512

          9e28474c484e29bc5b60901a9fd54200e2b0ca3c9dcedbf148f0beff7a9f51d08b8153bece8134db2a7aa94bf75bc72d4a2a838ea44ab2323b27ceb524a537a8

        • /storage/emulated/0/backups/system/.confd

          Filesize

          24KB

          MD5

          f3541802ae0975d34a8a3410d157fc5e

          SHA1

          fce565da91bedb3aebb973225733d5063f27cb9e

          SHA256

          2a42b663adc992ffcd526a47086be01df79b07db2676e7d0096e04fc6295093d

          SHA512

          c3ddc7f6bf8ed7887bc1dade302a43e0a1eded348e40c8fbfe4b42bc9444c1e69b4fd0b817bdf7b22e96d2f917fe546b88ecd080cf860f3bcbbdd65d5f6ff17c

        • /storage/emulated/0/backups/system/.confd

          Filesize

          32KB

          MD5

          7663198bc6f45e555e00a8f7a3eca08c

          SHA1

          7b298da20ab746f1665c5650db0ad801c49576dc

          SHA256

          7ed57535dbec2130a753a5c8eea4a77a5dab6075ec281edc16adcaa2d02ca25d

          SHA512

          a4ad4f371e5f4445060339f19b2a9164bf9426b493a7521f47f477393cc93b5d5c91060f4df97a453d3dc407a3b894ef6a587a08ce943483a6282badeda72f0c

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          512B

          MD5

          fbcebe868ca6d9102961117c4e21eca8

          SHA1

          b90287f06052ec1287103d14ac6c50d5926affb9

          SHA256

          6b67a448e7448fd492f6d8356d553d821a10f8c6722f56a7cd357040f868327f

          SHA512

          c025a09622d5aed5a752eb95c5c8997c30f899fd58ea22ff520e64f309bca51232229a092502ffa26e081c2f774abc3becd8b6868d1fcaa1edf8b52fc09b3189

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          8KB

          MD5

          361fd609c06d5e251b54858d18550f94

          SHA1

          fc4a40edade31b99fd7f5cc894c8a80537ff1f87

          SHA256

          20fe4a7878d611539946006c9e34827e1dfa1a14dbd9fe38225c43f7fb753b34

          SHA512

          0b31c22763fa888d2c0577e3069f805d7509cd4cab024ea3d1db9aebf9b4f494e160cb33e23552761510821b714b5bd9c26ff7ff9d1f8f83c240c49b624baa80

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          4KB

          MD5

          3d56b090b2618ffca22ac03e5b79d422

          SHA1

          06f8ea11e61731af0ad6fe9d3dfed5a6883d0a39

          SHA256

          c2fa5e0ddccf5b51e1f7a991807c430e21592306c01aa34ed85910d7a4654320

          SHA512

          b5b6d835e6ff5980d069d96c2540492dd1dbf569b721b471353809d62b8195b8567cd6ef9484e807db32b025ece3debd38eabf39e942957acb68e758aec422a8

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          8KB

          MD5

          cc58de5a77f90a511adc8b24f364c14a

          SHA1

          4ffaaa0d0a4fd1ed12dc0ac9c36a4f525b426d26

          SHA256

          71bb92d97101caae13eb5011e3b33fd9860f516b0f914f2673a009456c2d0457

          SHA512

          d114358d895533acc8a3d037334a48019c62267e2a6fa5907fd49977958f9f9a3cd0683ab899283c2be9635e0c5451805ef4ed2e24322aa1750f69bf935bfad9

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          8KB

          MD5

          dd48dd75a6f92b8d7b0eeb0e535d5dc9

          SHA1

          8fcacb410ca4fa2fcab950f3f6471e54ec4f0630

          SHA256

          319244b7ca3cb30ad111de84c035bcf01c1b3d4ee8d2fb965c3f38f60d1453f3

          SHA512

          4d5c62bcd8387264e0eebfeeba37bf7c9ed5170b8fe3e823c29e2ee2ebc324e317b637307ee9fc811459f77d977342589a0cdf143beae3a48dd02426b18a7e9b

        • /storage/emulated/0/backups/system/.confd-journal

          Filesize

          12KB

          MD5

          30083c4c74223553c5c91bb74e386559

          SHA1

          94d4376fc1aa4a131f276b169976f3a426323d7c

          SHA256

          b77c8450c9fcbe630b55ef9ac17504565f8dad0cfae52b7b4adc558abd526ecb

          SHA512

          fa40d75f9dea9255409ab60c7158fd54a0647cb0673f44254fc48ff5ff58c48f2a9d5a19ae5da548ea66f25995c26f2cae0a99be0b2b823dfca96901f2dfd89c

        • /storage/emulated/0/backups/system/.timestamp

          Filesize

          25B

          MD5

          7209388fbbc6f0b03102f57e32de4d9b

          SHA1

          bb3323d14050dea09d9e3da644ae6a6411947bff

          SHA256

          300f822d45b52b394c6eb9db3466056dd03b25bad8ef6efb56dd81dc28e9c945

          SHA512

          6651c4791bdf7de4fbbdb29554355b0d9ac9e6f349d478d98a9bcd9244543f9c3366fc7eb59721d39acc08ceba426079172e957da31afcc736d678f6727b235b

        • /storage/emulated/0/backups/system/.timestamp

          Filesize

          55B

          MD5

          31fcd0be1f4eecc8005312ee6f36a0ee

          SHA1

          a5fab684cfcf73547af831006fe2cef0f658c1ef

          SHA256

          9a3daf91ae24e624dcf199d5041523d0be118fea72f9b3d543a836c6a5154c41

          SHA512

          ed41859d2721f3b17a880fd48cdd28286a648fa92935b34a48fec5c1e03e97143964d999eb59cef79db409997e9bc5b56ff4d07328a4ca61f80e8efdce5b80a1

        • /storage/emulated/0/backups/system/.timestamp

          Filesize

          84B

          MD5

          5d401eacc8654324395d240c2b1cccfd

          SHA1

          5b9fa9f9f737828289aa720544e3de6d5e2f8cdb

          SHA256

          c6b9c40e3a632b68f168b2d28c45a0c807a6ce3fd905fb69a7c753a8b3f23134

          SHA512

          d5f6565c3265954ec69e723ae66183da4522867ac1f9df481917ae6161baa6538d8db20c878426e33e6c7acecbdcc77afdb16ed42dec0c7d4c9437e15ac4cb03

        • /storage/emulated/0/backups/system/.timestamp

          Filesize

          114B

          MD5

          50fa97fca4807e71ef321cbe929be28f

          SHA1

          3cf80ba448e56b2d8430206504548f2aaff4fcbc

          SHA256

          6cf35ff98a89dd8bc2e7e387485318ce55b6e226e4cca4300e5a5550a3392350

          SHA512

          4b74c96aaa17f549aec32b3d1bbdd018df27710316abfbac2201761515e0d224389a9253c77287ab8be85fa5dd1aeefb8d461c632580d9ede15becacc9ec64ff

        • /storage/emulated/0/backups/system/.timestamp

          Filesize

          138B

          MD5

          4e33a62122e166d26719fa1c6ef13bf1

          SHA1

          f9c654294e392ab3f36f41e127838151e8aa9a40

          SHA256

          894b92d9a99e3591825dadd28b55b70c63dd174b7b5386e21619b5bef330aaca

          SHA512

          827743b99b0bcc605b86556b67f11ac1c9ba9f029f570033d0b8bfc1ef6ff204999e91f4186bc0d4838215301bb52d207a05c4644078346947d1fd56f14316b9