Analysis

  • max time kernel
    55833s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    13/01/2024, 14:57

General

  • Target

    5900f4761eb731c27c525c3f2bd0722d.apk

  • Size

    5.4MB

  • MD5

    5900f4761eb731c27c525c3f2bd0722d

  • SHA1

    725891af86a6e1ad6b8b7fc297eea8bad17b4c75

  • SHA256

    25fc6a684c53170a0879370dbb44553f89ee6e072d849384257a8c2a9a348db8

  • SHA512

    f11bf29b678297139d70e2385d9a3fb47dfac22636c139bc0c25dd26f2878d208d932de7caa168f52cb673ed1e9b3a6ecc81dba8629072bbb47ed5f07b16dbe1

  • SSDEEP

    98304:PRIl/bb2wyu3NFgp3XOWDxi98IIDBkV4dZubxpyEg5u7dL0DjoLq2BRP0BOzBoq:PATKwVdFgRLiiI2TZuVpAu7dwD0+2To6

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.jy.ap.kdxz
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4285
      • getprop ro.board.platform
        2⤵
          PID:4285
        • /system/bin/sh -c type su
          2⤵
            PID:4314
          • logcat -d -v threadtime
            2⤵
              PID:4341
            • logcat -d -v threadtime
              2⤵
                PID:4354
              • /system/bin/sh -c getprop ro.miui.ui.version.name
                2⤵
                  PID:4381
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:4381
                  • /system/bin/sh -c getprop ro.build.version.emui
                    2⤵
                      PID:4407
                    • getprop ro.build.version.emui
                      2⤵
                        PID:4407
                      • /system/bin/sh -c getprop ro.lenovo.series
                        2⤵
                          PID:4431
                        • getprop ro.lenovo.series
                          2⤵
                            PID:4431
                          • /system/bin/sh -c getprop ro.build.nubia.rom.name
                            2⤵
                              PID:4455
                            • getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4455
                              • /system/bin/sh -c getprop ro.meizu.product.model
                                2⤵
                                  PID:4480
                                • getprop ro.meizu.product.model
                                  2⤵
                                    PID:4480
                                  • /system/bin/sh -c getprop ro.build.version.opporom
                                    2⤵
                                      PID:4505
                                    • getprop ro.build.version.opporom
                                      2⤵
                                        PID:4505
                                      • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                        2⤵
                                          PID:4534
                                        • getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4534
                                          • /system/bin/sh -c getprop ro.aa.romver
                                            2⤵
                                              PID:4559
                                            • getprop ro.aa.romver
                                              2⤵
                                                PID:4559
                                              • /system/bin/sh -c getprop ro.lewa.version
                                                2⤵
                                                  PID:4583
                                                • getprop ro.lewa.version
                                                  2⤵
                                                    PID:4583
                                                  • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                    2⤵
                                                      PID:4608
                                                    • getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4608
                                                      • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                        2⤵
                                                          PID:4633
                                                        • getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4633
                                                          • /system/bin/sh -c getprop ro.build.fingerprint
                                                            2⤵
                                                              PID:4658
                                                            • getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4658
                                                              • /system/bin/sh -c getprop ro.build.rom.id
                                                                2⤵
                                                                  PID:4685
                                                                • getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4685

                                                                Network

                                                                MITRE ATT&CK Matrix

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • /data/data/com.jy.ap.kdxz/databases/bugly_db_legu

                                                                  Filesize

                                                                  4KB

                                                                  MD5

                                                                  f2b4b0190b9f384ca885f0c8c9b14700

                                                                  SHA1

                                                                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                  SHA256

                                                                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                  SHA512

                                                                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                • /data/data/com.jy.ap.kdxz/databases/bugly_db_legu-journal

                                                                  Filesize

                                                                  512B

                                                                  MD5

                                                                  79702c069a8baaf0b50ba827ea031b30

                                                                  SHA1

                                                                  d13d28569cd88416bbd087f7c0f07bf6941f1e57

                                                                  SHA256

                                                                  244986dd04e7f01a995c9e5a5bf3b8b7d5214cc474821bd2dd2bddb259ef9a3c

                                                                  SHA512

                                                                  6534aa01e8833581b69c8c103827483f4179218f55eac533c8850f6dfbea14d461b100e0f55745289f2309aaf294d250a4972ff52c6d2c4ff675688be6625c73

                                                                • /data/data/com.jy.ap.kdxz/databases/bugly_db_legu-shm

                                                                  Filesize

                                                                  28KB

                                                                  MD5

                                                                  cf845a781c107ec1346e849c9dd1b7e8

                                                                  SHA1

                                                                  b44ccc7f7d519352422e59ee8b0bdbac881768a7

                                                                  SHA256

                                                                  18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                                                                  SHA512

                                                                  4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                                                                • /data/data/com.jy.ap.kdxz/databases/bugly_db_legu-wal

                                                                  Filesize

                                                                  92KB

                                                                  MD5

                                                                  92c9fb511c03e74430832a87cb4efb31

                                                                  SHA1

                                                                  248062296ac62f20823531c51c9490fd3e8dd01f

                                                                  SHA256

                                                                  5752d759a5f985efa6b08a9a94dfa23bf9a019b4c1657be6bfb2b089d268b1b4

                                                                  SHA512

                                                                  684316912d36a50d76905101a0ea67349a15a04b52b0820ba6648fbdfedd443847314b1d6db5aa023cd4277d0d449e3e8dafad8cf0c0b376ff66cbaaf06579d7