Analysis

  • max time kernel
    3760506s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    06-01-2024 18:56

General

  • Target

    46f3dad142e1b2a21cc21013be8036b4.apk

  • Size

    3.7MB

  • MD5

    46f3dad142e1b2a21cc21013be8036b4

  • SHA1

    fd75fb7d8618f2225418dc1bab0812b2b5ec9b43

  • SHA256

    b4ae132a806a238d841b0b1150323c81b8f40dacb4010cf2adaf490ee67aa51b

  • SHA512

    76ae8c09292699f705ca56fe59bf4d1448b0ef415a886fdec7b436e3ba8fe0725c906895234a3ea0f5950ad525780688b89fe708c5e45a02266983fb439136f2

  • SSDEEP

    98304:0GN6ylLbV/XqqwwWOA6Zd5VqpuqWoqtSxrk:00hCbOA6ZdvqNWpZ

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.ude.one.step.city.seller
    1⤵
      PID:4249
    • com.ude.one.step.city.seller:pushcore
      1⤵
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4281

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ude.one.step.city.seller/app_tbs/core_private/download_upload

      Filesize

      56B

      MD5

      b34ea21c4ef0c6e1a1470f20af117b85

      SHA1

      c3e2a6d181887b1a8b668131e2180815dfe0c4ca

      SHA256

      2dc6f0452784d48a5e144556c7992aedc43d238da26277a0170ccce96137fbf6

      SHA512

      c5fb6812f3931aaae38d3c9a7b3200fa49cc0678aec4a64db43244622210d00e060eb7a5b0042d3a820a8415175931b7f18c8f63c73cd70958df10a09bdb19e0

    • /data/data/com.ude.one.step.city.seller/app_tbs/core_private/download_upload

      Filesize

      56B

      MD5

      569b494656b018ad64dc8ca69e1daff5

      SHA1

      859c5989fab0e28b1fff74db3b66b8b784268c33

      SHA256

      33a096ef99b70880709eb504dd5aa749a1e50758d0e0cd8df4c8e719713d7a63

      SHA512

      72fd00bb4225048cd83b73084f49345c65b90f2786ca72b8ce08d64e97b444514250913c6560669be2e365741ddbca8ad0ecd3a25064e52298a0116af64e3e87

    • /data/data/com.ude.one.step.city.seller/app_tbs/core_private/download_upload

      Filesize

      84B

      MD5

      b7dba67d157144c145e6943fb87bc58e

      SHA1

      fd0499ab89caa5400670dcb20eaf5db11772ce1b

      SHA256

      2bf77bcc5fdcb52d5ac95729544e65e8c06f92bb9868dd1900589af0c3f0f593

      SHA512

      f6c668a253f2c97aa995fb7a9d25535f8e34184cea719d5ef85416eda66b4d5ddd76da3570d08491e80930786494931af82c6cb33eb06e43a35ef978eef4c861

    • /data/data/com.ude.one.step.city.seller/files/jpush_stat_cache_history.json

      Filesize

      174B

      MD5

      4ef8e29cd729e732cb5cac1540140103

      SHA1

      1ad6d31c4e8edea3ed36e414eaec1b4a5de9f8c6

      SHA256

      f84f4c684e22bd63481c07394e110f96ac8179db74ce58965102647bfedcf2a5

      SHA512

      9bebfbd9e2a058a61a17d4cdeece591a7620d05b349f3e436484acdece4a4359476949acfcf832cef42504529f3103a63c02235841918b1a1d94ad150b900782

    • /data/data/com.ude.one.step.city.seller/files/jpush_stat_cache_history.json

      Filesize

      169B

      MD5

      558b1be13c1a789dc01ec5ca42b641b1

      SHA1

      f672b5553b3cb83d5f6048220326d6022ee8f6e2

      SHA256

      17d16dcc9ff1dc14d9a030c943a174531089044017c7667cac517717815d8506

      SHA512

      2dac7c8ea4a5f6176f62f643fc215e7bc56c464b6037595161391862137994f1637826075f5801bc03c6f60361ad230465ebc545c6aa23c9ff501a1026f62c43

    • /storage/emulated/0/Android/data/com.ude.one.step.city.seller/files/tbslog/tbslog.txt

      Filesize

      2KB

      MD5

      b4a4e8cc44f9ddb8879950e1daf2ab3c

      SHA1

      81611ca0193b7714c0285140f6598d51b1a95d86

      SHA256

      ed1948c62456a7326790f6456b2e624a3c7d8afe07da61522a06588d0c2e5d71

      SHA512

      75afa1d46cc9747a1364ab84557978b93d60c27f373267405b9729b7ed784022dbad37584de2c0abf37d26f2c065d9da7562e510bd81b81a1bb9f918c9ddfcda

    • /storage/emulated/0/data/.push_deviceid

      Filesize

      32B

      MD5

      86685b254d2c63c2e41aac09d92f2688

      SHA1

      1d6c81759a62bcbc41943995f1d48b78a0edaea0

      SHA256

      39b17f3bc536a8549fc7ac3951de1f5d95b6c4fb883bc496576795501a334708

      SHA512

      9b31dbe697a1d3b1f5322df2b7650323325074fb8b542df8e1b643cbabd92df843a44462df3760826e14368f645c3cc43bd962b19e2d40bdd8c2eecd10b2e973