Analysis

  • max time kernel
    3041227s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    25-12-2023 06:10

General

  • Target

    nearme.apk

  • Size

    3.1MB

  • MD5

    b9aa533d2ce959630ba8f07cfd56c311

  • SHA1

    1bee22ce7dad287e32f666ec85251588b04084e1

  • SHA256

    37426868098d98d8d3fc0046d8306ef552fb9e4959abdc45bda35849cc3363ef

  • SHA512

    ece8c56929b0d867b57aca552ec99eacdfc0d17b00187ac9aa06021f880cb52a6f56365e2560fcaa859c31206bd10b0a6aaa5b1e672236ae4e7e7f181b50d9d9

  • SSDEEP

    98304:JVX+YhcaTw2PbYRu8dd7VPR/RCFpJNxk4v6QwPKs4y:XX+6caT5PgvDROpJNxkGDLy

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nearme.atlas
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4241

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.nearme.atlas/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.nearme.atlas/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    6b2d3b73c21231cb5685b52a1518d84e

    SHA1

    8dad56fc4d511ea2391301c34731dd78137a5823

    SHA256

    b229037de79fae71673aa6ae1a145aedee006a045992425021b5d908c4d6aef6

    SHA512

    ac01bce61ceebc8a71f61fa46431b187656c34eba8e5fb58647a6a9a186ed84ae4d7a9c263881b0fdc4e0208820541e0e8cfb5db3737b160ebd3036e56513123

  • /data/data/com.nearme.atlas/databases/bugly_db_-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.nearme.atlas/databases/bugly_db_-wal

    Filesize

    56KB

    MD5

    23c56274300e7469eee6217cbe183ba3

    SHA1

    ab69cd987d3d47d71a9a9f968bf38e592ae8e409

    SHA256

    e12e30158458be143880cd6074c4d213924e4429e57f5217a49a32c7eeb92169

    SHA512

    b9c84d802df7af2cb9be38cf766dee48bb990b8d12f19616b84b1c247bbbe07074694f8c1674604623cb172750a36df4421f5cb6c86a4c057fadd09dc2f51c2a

  • /storage/emulated/0/.mcs/mcs_msg.ini

    Filesize

    30B

    MD5

    4f3ea4f9aa3df460c2f3520abc3fa016

    SHA1

    6057fb25c90453aba3c045b748bc1e2e52f7367f

    SHA256

    bbea94d72c0e5158d5e75b501af4790c829d99de727f20fae08360612e4ade83

    SHA512

    9e2d107ed5ba5dbd18a9cd5ba85e59ae3fb990d644c59649906588d2ec8d32459a2bbc5bb7bf50e34e9301d9a80d956a0159bd351f29b99be34168b27b5c8660