f7dabb5ad3640bb6562d9c444e27838a7ede32ec9b2bde4b54a6b0b2bdddfdd5

Analysis

max time kernel
3029570s
max time network
136s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
24/12/2023, 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f7dabb5ad3640bb6562d9c444e27838a7ede32ec9b2bde4b54a6b0b2bdddfdd5.apk
Size

19.3MB
MD5

f6602a83f1f0972e41c7b199f5acc83b
SHA1

c72bcc4e47bc403e85d8caa3b60eb49bea04d8b2
SHA256

f7dabb5ad3640bb6562d9c444e27838a7ede32ec9b2bde4b54a6b0b2bdddfdd5
SHA512

b3378061e29bb779fb440cc44a4324fdc40453e304aff93fcc0675171d43c601248f5c684efdfa8d563ea80269e806db8d8ce088c23f642b0c95ead376a64bf7
SSDEEP

393216:HbjbKvRTt3VFA5ZA5yT1uAhpUfS/T54ZZ0OB8EUPYa/U4AkRvYclVf6OO:HbWTt3V6ZAGgYpUK+ZZhaE6Ya/U4vR9Q

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.yiwang

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.yiwang

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yiwang

com.yiwang
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yiwang/databases/xUtils.db-journal

Filesize
512B

MD5
50a2a20542f1c2e229ad374f1d237066

SHA1
ed389783a65cc68079794e97f152942ec5a0479a

SHA256
a89f3d12293862442593f7a51a6eca0fe2d1248cccd3db818e2619cd471fe50f

SHA512
3539f623a964ccff9376d59daa74ffba773b51dee5b2e4e0d876c00b9f7f84bcf91a7d181ea80009fff0432013197c120d19f489aa88ef20b85daf9b8b8df280

Download Submit
/data/data/com.yiwang/databases/xUtils.db-wal

Filesize
20KB

MD5
39b0b6aa0d7f66c3cdde1c9e4f3eda15

SHA1
773ca66f1c3b3efe1c9b87ddd39eb43776866b5a

SHA256
33fd6130205ff9a43a2ac39ec03556436961cf08344537ad2eae9d4f312afe73

SHA512
89969fe7d0676a73a79e7c80b61912813500979fdaa1c15ef0c9821b7e27d89a0e46366156387a8302e75d2767f8bd81d479cf23e563b5ea795b30b2c7e64840

Download Submit
/data/data/com.yiwang/databases/yi_address.sqlite

Filesize
386KB

MD5
62f6b2a98e8c5eb80994f1fd31bb01d9

SHA1
a1e0911821dc52e990284787d19655874d63ef2b

SHA256
c56a23ea0eea2f2bf3fe8c17553c512e7b994c45c8d76369dff01b94473f8358

SHA512
1e4efc6a5aacbb87f8b4b7c6e6d7348aafd7fb3c9d715505062011cd72189a817f7eb53145d844c4071cae848be80c1bb2feb4feb760662e9564c3a442aebea5

Download Submit
/data/data/com.yiwang/databases/yiwang_normal.sqlite

Filesize
386KB

MD5
6e1ebb5cfb9d02a1a48181ded18b1c53

SHA1
ce14e946e459ecccaf37d6fc7c0605c6e59dd9f1

SHA256
6f19faf398b77de7519253f0fedd0e97ecd151278dd092136489bec160da8505

SHA512
ef9cebf4d15daa594aaa24a4b11582736f5aec90d9454476e75b00f96e072b80db80bb02e4cb96ff8fc4372fa7116f5bb2fc7b5b75947151265491eb0744682c

Download Submit
/data/data/com.yiwang/databases/yy_1000_ISME9754_guest6558415643158873

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.yiwang/databases/yy_1000_ISME9754_guest6558415643158873-journal

Filesize
512B

MD5
2927cdbfd8754da6dc5c80b22ee7587c

SHA1
3bdbca9c3d18f57bc12bed2379c93c1b01542d33

SHA256
b726115a2fcdadaf1cc0ee7cb48641e841f9156c71839e6a7c21493a5a4b0260

SHA512
227e0dac5083e52b6c6f33fdf44dec191227229b52868fc128a98f1df8d1e5c94cd11bfb8c9f9fe5fd1d5f81441ae40d5da4325f45bc8c7f2802629d798e86b2

Download Submit
/data/data/com.yiwang/databases/yy_1000_ISME9754_guest6558415643158873-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.yiwang/databases/yy_1000_ISME9754_guest6558415643158873-wal

Filesize
48KB

MD5
00dbe4a2215c26049ab7d312f4157726

SHA1
db214390fce3eeedb6da12d586d2d9688033178f

SHA256
4f16f54502839733e4c69cd2c3f519fd1c2901ed25e485c3a1e18d47177e02a7

SHA512
e00cbbbc6973e3423ab56c3db4b416d52f2998aacc693e98ce658e504e354561aa27e6da4de3b77b8ffa177f16c863412ce85cb46b3195cccbd3508b008a8f6b

Download Submit
/data/data/com.yiwang/files/.um/um_cache_1703836619781.env

Filesize
606B

MD5
acee916341bfa1a98e105e9d9ee40903

SHA1
45da63b88ea742b7b5495a08d306a427e93d6a04

SHA256
eb35e873209d07a75d11d93669e771d546db83ac465359221d3e5c806d1aa29b

SHA512
9385cbfd545d18eed121b83b21d98addff4b9aace77478d33004d2b8ae7b78e11a74af0b259a5e0f5cd74747732277856bcb4762e36f1757728769b4217f6ed4

Download Submit
/data/data/com.yiwang/files/bfd_cached_com.yiwang

Filesize
186B

MD5
91e17c4c87e1237f97d1e10e0c709eb8

SHA1
d99aaaf423ae6ab37a02c5fcfa52c7c8bb74d974

SHA256
d0734266a83c8578cdba0fc5e1653cc8d1c879075a26fa498694dd344dbd75f7

SHA512
5a4ea1ab914429c3f877e1365ab3e8647687daee2d2705b52935da5a85a55cad541a86a983c5c2b3f101215fc386787806e11922f4f4ba90d0e8c05a60733b05

Download Submit
/data/data/com.yiwang/files/bfd_cached_com.yiwang

Filesize
578B

MD5
510c21df4e02b1fe959a69b7ec9470af

SHA1
58db7199a12c01b506d093389cb913a4ab6c7978

SHA256
8d157e8398db41772068f90634e1d41a518350b79b9899a6af31af62b4e214ef

SHA512
a091728b4961c0139498c67aa8eded6e77187ec77fe45aa63d9b38c6a3f3435a07f5a1bc0a388630886c635da6fb313fa10c5fafb1059e1669387cd36788e74e

Download Submit
/data/data/com.yiwang/files/bfd_cached_com.yiwang

Filesize
725B

MD5
a972b9cc0abc282bdfa06946784c27cc

SHA1
dc0e9276f0c7312597ccb1f9f042744a805a5b3d

SHA256
e9eddb263ebe3e75850efe5ca69ca51b4b5eed9a7fcbfa6f6aa36c325b4b458c

SHA512
b9c214c6ba65e7d31ae458b3f481fb872abfb9a578c12a44cbca01f54677e6bebb40abf9a8486281891ce2a804a42c246359c8f28143a5b9c5672fccecc6e2f6

Download Submit
/data/data/com.yiwang/files/bfd_cached_com.yiwang

Filesize
870B

MD5
ba31ea9f2133a3a4a67e92ef1e43eeeb

SHA1
f6d4e750e6737d2bc1fcfc8b53fd8e0f84b203ca

SHA256
4a0119dd67b48b795d2069c7cf814c80025cf3d41596faa4db06c7c8c6950f7d

SHA512
dc3a963fac4fc1120a707d91a4f412d96c524abcf9ceaf69811ede7f16d4e98bf17c8c9e60d4115d499842334086766458f040872218df39352a2766f45da2e9

Download Submit
/data/data/com.yiwang/files/cfg/a/ResPack.rs

Filesize
525KB

MD5
0357e8edde36315c0e0a4f5385de625f

SHA1
2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

SHA256
44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

SHA512
497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

Download Submit
/data/data/com.yiwang/files/cfg/a/mapstyle.sty

Filesize
248KB

MD5
46a9f9a5221dbe4ff71bfcd2ee045c5c

SHA1
915cb3bc2f0096dede38afc1cd7f09c8782360a9

SHA256
ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

SHA512
185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

Download Submit
/data/data/com.yiwang/files/cfg/a/satellitestyle.sty

Filesize
166KB

MD5
3f1348cd6165c9a66a9892565c917ca1

SHA1
96f0c939438c494cf3fd89246d458e92c0c7203b

SHA256
5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

SHA512
405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

Download Submit
/data/data/com.yiwang/files/cfg/a/trafficstyle.sty

Filesize
4KB

MD5
6a86f30539dfc9332cd235fc48fcb62c

SHA1
5c202003f6346edb85175b8df7c460793f5512c6

SHA256
34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

SHA512
f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

Download Submit
/data/data/com.yiwang/files/cfg/h/DVDirectory.cfg

Filesize
69KB

MD5
4e9eab735928758b860e48b2f9befd7b

SHA1
7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

SHA256
1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

SHA512
c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

Download Submit
/data/data/com.yiwang/files/cfg/h/DVHotMap.cfg

Filesize
10KB

MD5
c16f5ca1517683c46e02a6b71aab3c00

SHA1
2d09a048d1b8d556d89d4d723947e9e234b5e59b

SHA256
13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

SHA512
a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

Download Submit
/data/data/com.yiwang/files/cfg/h/DVHotcity.cfg

Filesize
1KB

MD5
883c30365d5d377966125dd0c079debd

SHA1
d296ec1e3f4badb6e3e6166c1473fb55d4265761

SHA256
50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

SHA512
00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

Download Submit
/data/data/com.yiwang/files/cfg/h/DVVersion.cfg

Filesize
86B

MD5
298924848d2517a508f43ff0cc51bd3b

SHA1
b9fcde7b86653ead6deb57280a6049cf87745710

SHA256
0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

SHA512
63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

Download Submit
/data/data/com.yiwang/files/cfg/l/DVDirectory.cfg

Filesize
69KB

MD5
65685a117c72fe8fbf5a92b07073c99e

SHA1
b115b527f74e4c291edcaab19b316a446aca8f5b

SHA256
19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

SHA512
e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

Download Submit
/data/data/com.yiwang/files/cfg/l/DVHotMap.cfg

Filesize
10KB

MD5
cc3fad9057e0940ad4d4c7ad27922023

SHA1
403cbbcd7b819733b5caf49ed2a58d654441e99d

SHA256
f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

SHA512
ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

Download Submit
/data/data/com.yiwang/files/cfg/l/DVHotcity.cfg

Filesize
1KB

MD5
1c6abcbbd253448057930ad1cc59ac75

SHA1
a5845d1c4bc87b8b4785b456d76edcb8309eda4e

SHA256
a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

SHA512
71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

Download Submit
/data/data/com.yiwang/files/cfg/l/DVVersion.cfg

Filesize
127B

MD5
d54b7b380a5ff46c78283013a07d8e0f

SHA1
f697c5f7028ba2679a96d6bc5291c38ff96d7982

SHA256
c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

SHA512
ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

Download Submit
/data/data/com.yiwang/files/umeng_it.cache

Filesize
393B

MD5
11a497a8521df504585ef9cdaf146cd7

SHA1
a2fea8631abedad99a87c5f874201ddb33003c95

SHA256
6ef2cdff0c1954b6e610b4d0abaefda9ae0b643d5a4012a2dd55fb4a44270fa1

SHA512
206e7273e6303b81e43d410061b749f1ff6786c9e4547e97ffcaaeb8d7d8482885eb46c687dd0f487475fae6d0a55e3e6b96a74aa8967cc657fbd09a84a24f9c

Download Submit
/data/data/com.yiwang/files/ver.dat

Filesize
6B

MD5
8e31aa8d6b61e8b044ac3346e87098d6

SHA1
70e4050667039f00eb5231bd731b9f3cb5daf00b

SHA256
d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

SHA512
2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
9c499e90899a80c8959502e26c72cd21

SHA1
24e9193f5e602aa29788e12cc5643d66c521575a

SHA256
58a9931b8e5b44beac2ffc673fa8772fd11f2693f54521c9ef926fa908384739

SHA512
cab26af447ca2e2121c315c137975bafc8d84cf2434c904e3ae53e9c73fad0947e38b353ac00c65e7e814849229274c788b68c4762718f35d0813ab6a7531eec

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
d2c896b134cbb86e72294911e7012016

SHA1
c635f8934d1f7e6e4ae2d0ca6bc749e6a708a250

SHA256
fb270f34d46c67b4392406e01b7419f2b6bf9471eb46358d6d2f168f77cd7b57

SHA512
9e785e8d28e8904cbcd82226e4a6555b8e52c2158219514a06335aaf604cfe196cd2b78010884b562cd8cdd14d91794b748cc9a6ef2cee873288ff24b063dfcf

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
381B

MD5
c6396766dd84ee54c5869911fb1b4e1d

SHA1
73d94e3f06994d206e71d72264c3135d6e1bb697

SHA256
fd1cf6eb9fa1b9517e3963de5d726a6fdc02680d7f5e5d92140814f33bac05f3

SHA512
bd74627443d29ce7ba9db81596224ed489535bd7b3ca267b78a0af3c887e8af1b4e31b4295a2e5a7632d3a5feaa8b91dd99a8847afecd8b6626e66442af46e1e

Download Submit
/storage/emulated/0/baidu/.cuid

Filesize
89B

MD5
de1f060a896f88e00f1e4b8d039ae12b

SHA1
da1b647bdff80ef16d69a9da489dd20b4f199bbc

SHA256
e8fc3934cad7f844b2b955ebb4d690a1450c9bf7dd3bb39ac190780a9d366a40

SHA512
c12ddc69eea7992b06b257d184f9c6d576b39c12cf2155540edbcd7b4757bbdf22ede2859080dcd2d48b1b3e7f9acb41b2ed56c366faeed21ac30df18324ab0d

Download Submit