Analysis

  • max time kernel
    3587926s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    31/12/2023, 12:56

General

  • Target

    36f2e02e82806d101b8c486a953e55e4.apk

  • Size

    5.9MB

  • MD5

    36f2e02e82806d101b8c486a953e55e4

  • SHA1

    9a6d78b0a572efe1fa750aa63715b1495d2e63f0

  • SHA256

    ac4709532b6e916f609c4cb2893fe14990009573a87447b449ecbfba9218352f

  • SHA512

    1e81c255caf7fc92f771166c92cc1d72fcef861cd0cb8c210b7ad1a62205d73933fb51e510ce67f49efb499a130ab44dae2a709820e7b842c7630d2f5880d5d7

  • SSDEEP

    98304:HsevfgeVrVF8xE04AIb80R2fyDrV8Mwak5GuyOhIszz5Tl2pnj/EtDBOj0q:MevfgGkEbZb8mz16osH55+DEtDBy

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.guangzhi.weijianzhi
    1⤵
      PID:4486

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db

            Filesize

            20KB

            MD5

            b6d6410653c0d3a9e07151a6e2fbaf41

            SHA1

            ec986f26ad897acace4cee77eb0d7059f4400864

            SHA256

            7d65f02102de4d8525eb1df726710fb08e06508dcd2c32601c58c13e53c85198

            SHA512

            92af642e2517cd2c50c3e69537772ca83ca36f36e6b8ce98329801edb622888fec3182bddec1cd268d0489a1df22d707daba3d0122372e85e4cb77bb54bbbbc7

          • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db-journal

            Filesize

            512B

            MD5

            e662e162a906f830018dd58798bb8884

            SHA1

            40af5e9297ce299e4d0c0325068bb07b856bb9c3

            SHA256

            5015d1270a63d21efe243d6b6ad06d166bc7f1483893046578800c8e3bba8a77

            SHA512

            0dbcac739fc5f1cf777f1e3360d6083aa3e783f6b05c1a864bc546feb6eb997255292dc218baa032ec5d5f8b6661bfcc54109a6a51a39ebaa127f1cce6f95ae7

          • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db-wal

            Filesize

            32KB

            MD5

            b1a906907e2996cf8e255989af9e9910

            SHA1

            c76349aa2e1122ce0e803a70bed38012da2e4a56

            SHA256

            1fa625b690303614768551e02fbcd571600184f7d96168e060b89f3d0937e44e

            SHA512

            ab38b43718a89fc4fae1f26925c6f3c276b4578dc2b257d52afad7e64d94ee877cf63fc35dffc68a80043a9467de65f5d4dff669c424943200fcb230ee968f6c

          • /data/data/com.guangzhi.weijianzhi/databases/jpush_local_notification.db-journal

            Filesize

            512B

            MD5

            0854d65609802ae2697697b0bde3c2c7

            SHA1

            b5cddd644d0536a6b039b978171ad1a92e2bf73e

            SHA256

            e35028f16e9bbdca0dc38c99f65098d2f53b11eaa38f3129e8e825cd468cf1b8

            SHA512

            654cd316355e9bd98dcb6eb0c8710fd0e8cd83ba1db635ffc1d47342e595c72b954a84e748149c4c71ff7a00b531e9534adca0841443e4f99becc8aef94f40a6

          • /data/data/com.guangzhi.weijianzhi/databases/jpush_local_notification.db-wal

            Filesize

            32KB

            MD5

            efe655993066e65e9e7b6e73f7b4bb11

            SHA1

            0196ca9e19c05dbef37092868ac5eecda9b7d72f

            SHA256

            d31846f049af5977395f6da96590641e3eb2549a6e5c7be8b3728779d8cf609b

            SHA512

            6bd74fe07e89e5f4434361ae3d22332f3833e2f61697c6196a7f539b4b97e1849d1c75ed65c55402633891ff9aac5e64c013c23a528551e78ed04ed2d9ae1030

          • /data/data/com.guangzhi.weijianzhi/databases/rep.db

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.guangzhi.weijianzhi/databases/rep.db-journal

            Filesize

            512B

            MD5

            227fc484e459123ff73d53f73a70d423

            SHA1

            2d8e92947db2f2cedf83a6d9997c28acc02f9046

            SHA256

            825f19b965417371a523939cff97030eff46d6c1ba75437ba67ce92ea2d1f80c

            SHA512

            a0122cd4b0a58f3e886ced77ac88f47ecda5a5e271b8102f209c2eb49e9d812f4bf459a8bac71bc4b1ca3d7b303951105db9ae64b07974c13001f88a3d7863cf

          • /data/data/com.guangzhi.weijianzhi/databases/rep.db-wal

            Filesize

            36KB

            MD5

            55fb5c33b67b44c34e2bcb1f15e8d678

            SHA1

            02b226f0f9ecd045af2b8f46d541d4fe29176720

            SHA256

            b424a52dd66d5bcee78e86da39797451eba76ba3c3d5e29c760bff3f5f74c7ef

            SHA512

            daa7ba4831f3da3d5340f86ee8e8b9eb1e5445380669cab5bc738e3532b16bdd38477ce35ef2456070c7bf82e198a7b1a0963bc7be03b4072959b68b5da2f4b7

          • /data/data/com.guangzhi.weijianzhi/databases/settings.db

            Filesize

            20KB

            MD5

            779f3fa12f27e0e7ab6afd9fc6a4d12c

            SHA1

            85ba2fb93dc145eeed1904600ab3112bbf1606d8

            SHA256

            a89d02a6d03f5c23942cfc0f81bb2e198b9614937f31313a2693276a53fabca3

            SHA512

            88e82836f70ead35e64a8b7c744bb455517326e69b7404ffc7cd16ad23b7feb73246025fa6f7016e90553d5c0e9a333a20dcca0b6a1e49d7eedbcc37d3492976

          • /data/data/com.guangzhi.weijianzhi/databases/settings.db-journal

            Filesize

            512B

            MD5

            750bacf42a76d7477cae505b2d822227

            SHA1

            a9c2805b5a9e1e6f15785023835a59be0b098122

            SHA256

            1777e34c68862c8cc4edb11553659c54082d02cb58d13e0afe5c3a5c6dce8b7f

            SHA512

            1086df6c88b1572bc1dec3065fef2355302ce61c9dafd8a36dc3a82e131df6c4eb76d3d99cbf281ccdeb1c89e9b5b5df6297baa20538a509909bea1fbbe0e27b

          • /data/data/com.guangzhi.weijianzhi/databases/settings.db-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.guangzhi.weijianzhi/databases/settings.db-wal

            Filesize

            32KB

            MD5

            2c65b8c796751557c8923df27f077d8c

            SHA1

            89d4a551e7c64baa7f9fa88762e60308a71df34a

            SHA256

            209c3f90831680d0d09f7e69079b7c2b90dc287f3d5346b878b041f7a4d9c015

            SHA512

            5542f8c8363258fce76c4d2dc46b70085a0a287cba506f5a045075c63563d5756de7bbce0ff4334e4c49491f87c24480f14177a9af666d4584b8941bf7764935

          • /data/data/com.guangzhi.weijianzhi/files/.imprint

            Filesize

            838B

            MD5

            5d349e2be5c7dc078190815fad24b363

            SHA1

            09aae53f520c93571f10638426d4615b473f0879

            SHA256

            2a0baec96383e863fbd563e07961385f520953b8c9c9ee72a9097784ee6c15e2

            SHA512

            fd63c693454a5c79ab01f5dc4681ee6e9a83710d15edaa8d65746eeb9415336a64e0921a1259deb648881a8938ccef97d917e3e709ad1a35bb94d8d57fb730ae

          • /data/data/com.guangzhi.weijianzhi/files/jpush_stat_cache.json

            Filesize

            189B

            MD5

            79709283a132770c671681933a1e5fec

            SHA1

            55a39686d15e24ddb613c67f51817ee3e95edeb4

            SHA256

            f602cdcd5a417ccc0f2dc3425a9cc1fcd8bc84149619312848d19fa9bbe677af

            SHA512

            164ef0aa34fe19f2d74632c40dbd7e56b18c55849066efe08daafd7726d5aee2cca4915c8f69b72363660c92300709558f32b114448ebe032d408139117897b7

          • /data/data/com.guangzhi.weijianzhi/files/jpush_stat_cache_history.json

            Filesize

            158B

            MD5

            c367a6b3a4ce7a88a831a20cf0b81d56

            SHA1

            e7cd7342ea7343d16edc10b38abb5ac639965d3e

            SHA256

            165e015276f5af1f3ad6bb489f09106ba614eee53988fbaec40c294384fb86be

            SHA512

            f9f5de1bccde7de4bbc76c89a1038ace39d7ac2a52edfe2e7faee4fea8ad5091a568e73f2702bfc07dfe5f33be507db0b24f2fed74bd720d69a9800e1add5f4a

          • /data/data/com.guangzhi.weijianzhi/files/umeng_it.cache

            Filesize

            211B

            MD5

            a90e0432e08191eec548c7f248d7a6b2

            SHA1

            8273fbbd5db86f9522e732f53d3bce530b2250f4

            SHA256

            0904f84a818c1fd71849fdbf319f6baed1c4aee5a4b92ec4d3fd05f436db4806

            SHA512

            f4e1cc4955ebb382c46306a3764e45c8fed1fbb161801aef3836b99237ef0548a8883aa3b7f036bf4fe2a767115cf0c9d3935de21fc068a10651049ce13ec8b9

          • /data/data/com.guangzhi.weijianzhi/files/umeng_it.cache

            Filesize

            108B

            MD5

            52186b28b40d8e4472f1894a8dca1a3f

            SHA1

            f287a221df27c9b396a97975aa530e602866899b

            SHA256

            64c7152ec719874c95543a2fc84008096ef426b18375bfc2b4c14cae5c130f17

            SHA512

            f7988cf2055151d8783a9fae8a2211879ef3d2c13893616477d70cf888e4c6007b9872bd2959a442665a253acb674ca7c8e0e2f53b702bab58eb44df3c85f9ce

          • /storage/emulated/0/data/.push_deviceid

            Filesize

            32B

            MD5

            d5bce58ff27d487bf2611acf487954ee

            SHA1

            11ab26d084ec7535fa670987b5c4382ea7062958

            SHA256

            89e33555b1c11a3da258bd21dc8c893728b6955c4127354bcb53a5e0898c4946

            SHA512

            0da8e8780bd63a83fffe65556e7a8890c04b8315cbc32e4a5afd4e98ada79b54a9740aaf9b8550a57e5ee5942481f08b3da4b7ebb901fe6df219fe5f0d8126f6