Analysis

  • max time kernel
    3255884s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    30-12-2023 04:52

General

  • Target

    0f235e91baa51cdb144fab9dd8a0b3e7.apk

  • Size

    1.3MB

  • MD5

    0f235e91baa51cdb144fab9dd8a0b3e7

  • SHA1

    6e9a29ea5b403d314d5d4d8f9883bedbb9b5c879

  • SHA256

    da8fd87400626d7ab22e9164df2ce12f7891ef742e9ad1bf2ea01c1767b9a79d

  • SHA512

    5f589a081d7830352fcffa0e805a9f3d8c2519a79069fcb07818ed75cebd79873162455e6bc213cda2d14bce9ee0ec15fca43ed60500f51f25e4b12670c07d9d

  • SSDEEP

    24576:WbuJSYOiS2Lpv7j4jRblD8hNH3vifxr+tIOLOnm/qDbCQW3CU5o5LyATTP6R:/wYO0l4zkNHaJuCmIbCQW5yBdPa

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.himoney
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.himoney/files/.um/um_cache_1704062933255.env

    Filesize

    550B

    MD5

    3501b954ff637b3946bc30c7689d8449

    SHA1

    83a51f324fb5cfdee9db6974d0ade4af6cf4dc39

    SHA256

    7f2241defe312b63d9f4f178ce4e8fe78d89c4d824c28e2bc8a510dfedaeda57

    SHA512

    f74be303da12ecdbd017ea283e57ba12e73a0f78b09fa504c4b3cc014ad21b3c8bc3ed5db3fa31f40c784248023659a47bdf5a9c8795f6d70ff1315ab3bbeeab

  • /data/user/0/com.himoney/files/umeng_it.cache

    Filesize

    245B

    MD5

    c45e20d35fdb7ec8cee98544ee93bfbf

    SHA1

    c8764edc43cc75fe18de508c6912814fbb3c4be1

    SHA256

    c00eca046d2b26a2576e192567aaf4c6c4c613191b68479770c778a806306c5a

    SHA512

    941c9bbec2e3a76196bbc6eca4e544c1558dc90426020f7666ab14ea90a114e07c608fedb65e83b2964b6fac036f4421b674814d467cb2728e1c52c5ebf85554

  • /data/user/0/com.himoney/files/vault.a

    Filesize

    37KB

    MD5

    7c3d296d098814106b25b51ccab44720

    SHA1

    6f995de869edf2e95de9d3f2cd38ec22dc338de1

    SHA256

    9d1e5cb76f3e9f034a9fa80a443efe36469efef4a336130ea6ea2e690481710d

    SHA512

    5ba76887362ac0d9dca967ab998318b609a5587dab29abdb10583794af5c238e2e82e6ab978573a4f544027d6f0dc9eeaaa43528c3a810892f21bfabe24c619a

  • /data/user/0/com.himoney/files/vault.a

    Filesize

    37KB

    MD5

    c3c35012166d0d9746bdd5af02885c4e

    SHA1

    b622a28ce03afb9a2a1dbf65837752709ef3d2da

    SHA256

    f726230616da48c5574f66e20aee1ef1a37bcac7e1cca56a4c3779435e8cc9c5

    SHA512

    0689421fd7f8d6a536e6f7ed44723923065435ab0b5fe1e8e579e379941828afcf011dff0458308fef8486b1947fe8370836be3cf34668bcceccebde76d26bc9

  • /data/user/0/com.himoney/files/vault.a-journal

    Filesize

    3KB

    MD5

    b8d8880260f8cfbfa1fb82e26019610d

    SHA1

    ee52d08a2430ff325ddc10b12e66db7299deb06c

    SHA256

    e6a83690dafdd7c62f6ccb8335f55b3439523fb4d93f70f403ce4db7c16e40c5

    SHA512

    86fce48ead4c6c9dda85b4bb0e19d9c5933c1531f5ea92eadd03fc5596eee9e6872f5f98dd53939dd8a37c6bbc79ca2fdfc698a9c65c1242dc91f0e776b34916

  • /data/user/0/com.himoney/files/vault.a-journal

    Filesize

    2KB

    MD5

    3912f61f66054ff70bd2bcfdb98a30f1

    SHA1

    05ad690d860d694f1aca1b3b3a9092d6253e3988

    SHA256

    9e89e4f60502d3c332185dfa830a68b347bf0dea68d5ebb3a9631568d7c7ce02

    SHA512

    1dfeda354552a583f44e235f932fb021f80d2de069c979f03cb757adbb1b115f950e8d076f21bba4493da29bd70618f61216eacc0812bfa4aacf7a0fac1f06c1

  • /data/user/0/com.himoney/files/vault.a-journal

    Filesize

    2KB

    MD5

    b6a68f04b6ba38ee4a8bc48f5ccbc649

    SHA1

    67795a3c1b080c31324a2bf5408925e1e19206f2

    SHA256

    0b67ca7be00914cfc92bc8dbe6589a87404a24049af46793a6cdbc959fd71d62

    SHA512

    c2cea4686a2ad0087b64d6f33106e485bbab61f31ac9e06b78a765c99cae2ccfed605d2f969c33e4287b9ec622c870eda45ba72f3b22567ac67ac90630805928