Analysis

  • max time kernel
    154331s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    14/01/2024, 18:18

General

  • Target

    5b85d6e397f02adfc2242786f3d7ea9f.apk

  • Size

    26.1MB

  • MD5

    5b85d6e397f02adfc2242786f3d7ea9f

  • SHA1

    50c56b39e3d0bf3835951f3319ba62544d3f9441

  • SHA256

    9fe7a9fbe335ba8125869dd59d6ef1a3de4a5327ab6f1dd69d8eee70880164e0

  • SHA512

    bf720760ced54a6fb48bc04d132a601911c71e41bdcd79854992decf44af61eb0801d4390ac7fd61cc0475fc85d15a722f2f3f37b0412d8b29da53795ad5b333

  • SSDEEP

    393216:B5IL2/+Oj1AYBYGESRtpnZZoDlR5VpJCdqyf3pwCxWlCSXNaD3CtBjNwFdZwD1zQ:Bb9XpEQpZqDbxulHmCWO3CLKwDR5cmy

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.lhzyyj.yszp
    1⤵
    • Loads dropped Dex/Jar
    PID:4317

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.lhzyyj.yszp/[email protected]

          Filesize

          6.4MB

          MD5

          a0c486750971990f1892ebeabe9b6e91

          SHA1

          05b43a011bbcdadf1ddd3e3b320d5dc16b457435

          SHA256

          bdc35e26a0fd8eb3fa5d27cb00cb2b2c4af08480886c4943fa1c684bebad1766

          SHA512

          5abc2bdcff99ac419e5f17e889827980e5945d5a30e370c5273abac958a97d144258556a5e9c353918547aaea3a8a7ec5ab52eae0f9f3e9869526f89fb7bc68b

        • /data/user/0/com.lhzyyj.yszp/[email protected]!classes2.dex

          Filesize

          6.6MB

          MD5

          46cf469fa137d2686a45e763de44702d

          SHA1

          5cca94109e0328e5f966864f15b26db102611112

          SHA256

          9ab71fbf06edac6b1c471882d4182cebaef3257e0142a78f0ae0f27de1ea1e90

          SHA512

          27520de70b5d96455f2ebaec038e0dea3a0f8a466d4b5b6a3cdf09ce65d5dfc5bd2ee90dbeb3827ffb2521432ca8d49fcf35224523fe980447c5b9d2f1438b7c

        • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db

          Filesize

          12KB

          MD5

          edb655088d1ed9f33f9d0d499b7a3ef5

          SHA1

          565c4f4e43179dbfc285cd6331dc8ac75a901af8

          SHA256

          bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

          SHA512

          98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

        • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

          Filesize

          512B

          MD5

          e9749a10449b5711b65975fe037689eb

          SHA1

          13e2960fae0d06cec81087721cf56a348dfb823a

          SHA256

          d0e370e869393cc2deb386f743b619fdb16de46184499a6ab382c35227e85f95

          SHA512

          731864eace779795a7094fcdc4d872a30a239d2f0ffd0e1d001f7f72be317016bb2eb9b4c40fa3c3e1ee6845559cfd58e1b579c2e9ccff48c6fca237894a8b47

        • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

          Filesize

          8KB

          MD5

          f3800f4b9353301400c8dec134890bbf

          SHA1

          85cc8f3d760967fec8861bdabd390feaa951f6a6

          SHA256

          b793657e202e262aee9c1e27b28d6d7f61719d9898491f59e61e13cfd40f5fbd

          SHA512

          24f3a32a466e2059cb11fddfa19a45900b27e608b71fc702f42df31f7cce990fe59b1ba001bb5cba83b9cee4af00b3e707b70b1f8075d1dd1810200bc544ff95

        • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

          Filesize

          8KB

          MD5

          d1d4181d3381522b808de6f969d26933

          SHA1

          d512a3b4d735f7a7911d64c12ff187a59e34c8a5

          SHA256

          215e3339fb08d3a9822adbdfa031470f58d41a66ec8b37e56036a9e024623bb0

          SHA512

          b3e24513977024e89a8c88783079f0a44605a38342f606d3ebf015fb5bbf7ec60d6e56eb1bd09eee84978f4c48bcc5aa90f5e117b543990283a24d07f902fc0e

        • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.di

          Filesize

          348B

          MD5

          f1d5ddab5f1dfce5dde23a817314e356

          SHA1

          6ca62b2c5bf1fbb088ecb9971af27af6a4e40fb0

          SHA256

          0c769673f3fbb71deaf6a3b4ff80124c7eb05dfd035509d0ffb8f5b16238bc33

          SHA512

          9ae08fd17103b588f141e7418c1b9292b49e911ec28d36adf564063262ae1b39a9e3d54bf806d77b8a140264e286936e4f486b49f79a239a2a35ecf13b41a2d9

        • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.rd

          Filesize

          32B

          MD5

          71ea14bc7cffe73b44858631f9f99dca

          SHA1

          e4dc4a334466fe47bb3a0864e33cce9ba34b49e0

          SHA256

          73e0b4d63f11d099846ed367b072c698b3ab908899f5c104009e6021a0409440

          SHA512

          071c496baa400229ecbeef3968f9d1b13a71f6fd5b9741dc1e211cc04c7f52f0798442ef40b3d7622106172fee9d04d4aa071fc7ae92e8f2c1a45078840543f4

        • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.ri

          Filesize

          314B

          MD5

          ec0c62ffafbb5dea01f79ca8ec159482

          SHA1

          707e9b84e51067b195294b7b0c12b01c6dbaa9d4

          SHA256

          027134797ded0618a996c3958de2d7f56286203cfbeeae4c7e34e68b265ccd23

          SHA512

          e284d48552e2c43bcf842498983e4d5b1079831b3a00655694da93a20bae9feabc1b4eeb2ba4df4b368e426dff24e869f262a6be2151659bada6acd3efd843b1

        • /data/user/0/com.lhzyyj.yszp/files/.jiagu.lock

          Filesize

          27B

          MD5

          9cb791d0ce99854bc06f6088d5795963

          SHA1

          16cfe7e287063d80885c1e25c44ccc889af0ba02

          SHA256

          07259c61eb616ddcd25a193f4e3de682a866e4f099d67ab8644a3021080c6a45

          SHA512

          62220bc0e546b58a2037b88b8275ff3679f24d7493b2160a15056f293a76b130308142325f75c4e6782a9b89af002dd195f41ff0f1328e59fafb536f4e5210a9

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          1f631d15cdc9aa1189e1fa7c2d4d08fd

          SHA1

          4fce50a5960ba743a743bb3799cc623aefeac09e

          SHA256

          79efe09a9b3d47dc7b9005c0b9191be58b8515a13ae276dc624b8aa38cafb0f3

          SHA512

          061c2d3a362b5d4f803bd5f92a18f51fc2f68b67d3e3088910ab9f55d57dea31bc15f30ab203e7012962a89e4b8007bebe75b28f19e3db0a8e29861080d4fb7f

        • /storage/emulated/0/360/.deviceId

          Filesize

          48B

          MD5

          4c4c5285293d5141f582aefa4e038669

          SHA1

          e01852a72e5a8e6f7d63a21426b515118196047b

          SHA256

          36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

          SHA512

          097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

        • /storage/emulated/0/360/.iddata

          Filesize

          32B

          MD5

          a0c1d6a331f7c92a25bc1236e1350475

          SHA1

          6acddd6c47e04e69b8e92799b7f00f9ec7c7e0e3

          SHA256

          66549307f27d4c7b31bef309dee0fd3940230656e3691b6d9113da01dfb8c02f

          SHA512

          0d18f8ef56c63135ba4648994fb2e636806644c8a395af177c36487eead081788b23fb03cb6d5046c58aa4bf5fadf47cd5f977fe165623a09987ffb2487b3a92