Analysis

  • max time kernel
    3771368s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    26-12-2023 17:13

General

  • Target

    7f8ab6bd7808faf883ca93cc4b6cbd50.apk

  • Size

    14.7MB

  • MD5

    7f8ab6bd7808faf883ca93cc4b6cbd50

  • SHA1

    e55c59b4bb4e229205ae941ce11125608889fa4c

  • SHA256

    ef88d8fa66b8fe9c25bce0c3591ae113c47a83ff63d67aebfbffd147e884845e

  • SHA512

    c257010ed24123cd07300088d0c0828b3f0f489fa0060125c2eb35974af87546a7ec3c468ee7eeb86cae3340c27b1b872c1fca71f8891da0846e7efe59bb4e96

  • SSDEEP

    393216:lQgApKxx0VIEjKJWTJ13kvm8Bk0Cy5mIah6GUv1:lQnAAI7a10vm8B4Ash6GUv1

Score
6/10

Malware Config

Signatures

  • Reads device software version 1 IoCs

    Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • inudayo.ha.ein.clothes2
    1⤵
    • Reads device software version
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/inudayo.ha.ein.clothes2/databases/reqinfo.db

    Filesize

    16KB

    MD5

    2eb6ccd15bd045758b754a1c9591cbe8

    SHA1

    3f44b74ac7923d5050b1d1d7ff4dbe332c60673b

    SHA256

    57c26b757ea53ba399d2835333d76c80fda9f88921cc482edf1e6d2efa7d6a67

    SHA512

    975c99e9a8f677b5f40efccb0255636bc05c93118b60f18d881b4445a76fc921d0f9499adcf6e4a786d27c360d029fe3c1aaadce096be5621c215b81ce4a9037

  • /data/user/0/inudayo.ha.ein.clothes2/databases/reqinfo.db-journal

    Filesize

    512B

    MD5

    ca58d6aeb8780073661a96b4b084095f

    SHA1

    1cf094e7c663204326c998765b4972743497ec38

    SHA256

    52e056857f05427bdffaad6f10e51102466f1ac6c1d6d617df76ee627a7b0ef6

    SHA512

    a2d8b1de01e879a6c9a4dc6a43cc1edb043a5c9a6c1b861698e8cdfe5f779c9cefcc26ed19acfe9eb60d5295cde654e86a85826f7f944344a3c5cf0ae2ecf60e

  • /data/user/0/inudayo.ha.ein.clothes2/databases/reqinfo.db-journal

    Filesize

    8KB

    MD5

    d047286602c9f883e0d4c19511d876fb

    SHA1

    10dec732a968eb99fe00c8fb9f3f64850718f2e4

    SHA256

    bc673c19d39f480f3d31e3153a0d685e63993bdda57359a31bb5e068a76ff2cb

    SHA512

    5e69da0fcda2a9b9c094a03cc9ff5fc13ced3d03f7f5452b0c3b0a3584ea1359b07065f2bd1d7ee7cd7c1a3429100556ef5d0cea12ff8968c19d4a66a43d6e7e

  • /data/user/0/inudayo.ha.ein.clothes2/databases/reqinfo.db-journal

    Filesize

    8KB

    MD5

    5c9585d40dbdba49314ca991b1ad00be

    SHA1

    fa82fa8987189c907d6a8c002ea0a8dc125e4672

    SHA256

    17dae351eb7ab92c15a4d26c2884d21e8a70eac16b1e423d589ed000e03b9644

    SHA512

    bc9eb8e79550f50b92dfb9689040d9757ce44aa256bd46a1c20aab34b871ada7501a1478f624c28a6abc39b41b41aeec94827b34c874f9f8c0a8569deeb42c51

  • /data/user/0/inudayo.ha.ein.clothes2/files/CNZZEvents_1704578272041

    Filesize

    106B

    MD5

    3469c582f8b4891025bf70974119adf6

    SHA1

    f2c3371faa41f7225901c0ffde99c54621ad98ee

    SHA256

    9fe5c1813d3ed616ed62d0a2f3170171b12ceb0fe1ed5fb4c0611d57810d4b16

    SHA512

    31ea9e309af8c70bb0d7ba331800bcab4f84e730f34ae610868e717bfc81652a5ae60abfb5a88b4eb62f2cae6e038ee2fb834813c0a4a77887431c1f558a2103

  • /data/user/0/inudayo.ha.ein.clothes2/files/CNZZEvents_1704578272041

    Filesize

    158B

    MD5

    e4d2ba34bc687ccb680e46a49bcd638e

    SHA1

    2216e86c685a5f2887d3f58bc0a564b54827a124

    SHA256

    b3e89babedf41ed6ee746aa82d0f511ebf8befede65f87c48dc607f74936fafa

    SHA512

    fdba302dc0cf7391d69e822d330d126f75b22872b44167a64d1991d8811464f83955f4f105328d4263b55d9ee0b74be7ccba7992b0d3ebee8dedcb1c206d6ac1

  • /data/user/0/inudayo.ha.ein.clothes2/files/savedata.dat

    Filesize

    131B

    MD5

    2dcb80c4f41d549092915d3f921553be

    SHA1

    6c73f2181cb7c1bb57bdc6b646071aacd18eb180

    SHA256

    ff0e267c41ec5d4533095fa066196ad9c766d60c0fd0f91b90dd51d316ff4091

    SHA512

    eb61fa86ae00f2b8702a09d67bff46a463c5c86b36e46bdba0a2a19e3ecbacceede5165c7d1fe17575a67739e32959d1d03251695423478d5faa2d4fede44669