Analysis

  • max time kernel
    3759792s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    26/12/2023, 15:36

General

  • Target

    796725bbaa1d2cc5ce9840fad8d68959.apk

  • Size

    1006KB

  • MD5

    796725bbaa1d2cc5ce9840fad8d68959

  • SHA1

    fd4e5ccab6a2e7df876bbbe2d0c0865f368f6251

  • SHA256

    c57dfdcd1770d3a6f3009604887a90959d93f54fc4d8f6a71b729904117ee04b

  • SHA512

    3396908b165275c64a8240a04c76ede13f8b2eabbc8c61f100d3da98f90eb9e3a98c1a7aca2b9566d784463b6275de88bab41ec53a3bdf8f6e651b4c8fafb2b3

  • SSDEEP

    24576:uYwqre9bCgeFnu0wnIvBZHKS29mrWXBV8rIksOI1:ujq69bkWIv75wX08ksl

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nichiri.blocksmscall
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4481

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.nichiri.blocksmscall/cache/ads4209600422164472975.jar

          Filesize

          2KB

          MD5

          d80f6d032778b02d10a9c9a2f1a24714

          SHA1

          e34d4ea9618b1b499b65032723ea029ab3998500

          SHA256

          ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b

          SHA512

          34fa52d41831142f86999ac407aafeb2b69bb4cd45ada9f739be84c80deb0414d11d6784f385eec287e4f6b5bdf29ba1c9a6a77c07707d66a73c60eb389136e1

        • /data/data/com.nichiri.blocksmscall/databases/BlockPhoneSms

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.nichiri.blocksmscall/databases/BlockPhoneSms-journal

          Filesize

          512B

          MD5

          c6c18175b667ba4f357c319966584816

          SHA1

          c1610f6d64fc569a07e4f6cf867b38444eef8ce7

          SHA256

          e289da8d8bea2789520753a59eb3800c8a37c1df40a4a6da0b0f4f78e77d669c

          SHA512

          e84a6edbe6b3c24cc7536ada5633aa4255a494ccdbd71ab34454263ace2781c64abc35b03da879855b3d5ddd37e7eec0b3e030fd4e3a683f28c6ea73655ac826

        • /data/data/com.nichiri.blocksmscall/databases/BlockPhoneSms-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.nichiri.blocksmscall/databases/BlockPhoneSms-wal

          Filesize

          68KB

          MD5

          80f01b06929c7c34891ed6a889057393

          SHA1

          f298fd5976d144737b8a155152b52fd363a4274f

          SHA256

          7390407ccec6b5f47a77f95fa003f2aa3eea2d14da23e3f18e391da8fd97e9c5

          SHA512

          14523f31c66cb5aa2ab66d270c61e8df561844a4fc33e54501025669b45f9797372768097157a8eb273405a31ed2fe64ab8818f1f9f9d09b54cc5e35e078fda8

        • /data/data/com.nichiri.blocksmscall/files/eula.zip

          Filesize

          13KB

          MD5

          a4fd2c45ffb2dd5cec56ac54e5fb92a3

          SHA1

          4b40fce097af6dfb8979ddfbfb45c85a800ced39

          SHA256

          57b24973a5e8841e556f2b4e016e632e96aeffcdb8fbd2c4e560bc69366f6944

          SHA512

          31bad7a84069bd950d44dcf245b684628c23b82a129414b73cc95524a5e7bda6fae4374b12ef97cfb9956c100a77423769d59e0fb982cc8c140244562dfb1053