Overview
overview
6Static
static
666304e82d4...20.apk
android-9-x86
6UPPayPluginEx.apk
android-9-x86
1UPPayPluginEx.apk
android-11-x64
1__pasys_re...ll.apk
android-9-x86
__pasys_re...ll.apk
android-10-x64
__pasys_re...ll.apk
android-11-x64
__xadsdk__...__.apk
android-9-x86
__xadsdk__...__.apk
android-10-x64
__xadsdk__...__.apk
android-11-x64
Analysis
-
max time kernel
136s -
max time network
154s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
18/01/2024, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
66304e82d4c62f046670d0ec68182720.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
UPPayPluginEx.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
UPPayPluginEx.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral4
Sample
__pasys_remote_offer_wall.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral5
Sample
__pasys_remote_offer_wall.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral6
Sample
__pasys_remote_offer_wall.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral7
Sample
__xadsdk__remote__final__.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral8
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral9
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
66304e82d4c62f046670d0ec68182720.apk
-
Size
13.9MB
-
MD5
66304e82d4c62f046670d0ec68182720
-
SHA1
d5658fceeaa633b394c01f5e529c65e140b5eddd
-
SHA256
0b037c147da72cc3f759f9b8a6250e95a6f6def6cf916bfabe6beb10eb4ef5aa
-
SHA512
a74f95a84298e531ddc7eb9e3e6018e5de752927034e111f78385abc73a90da98936686711ed8ec2ae15c9b4b633f2fc7f03b6364d08a360f95fdcddc17ab569
-
SSDEEP
196608:lclqh+fIYRDkUP8OMzfJnyba+FhhKQWQkqe7Y77N+ko12ebq9HLcP1IUUJOXUlvF:lcoh+6/zfJnyXjtO2+qZC6JOyvAJs
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.mobilewindow_HandDrawing
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD5a0d4576fe9ef4ee1e3a694a3e69bed0d
SHA17dcf99282099ed763b82c94a743a75993579ead8
SHA25668afdc4a1a6ae1a28c74bc2137a064fa7a0c34736055e7012a33b78c70625c6c
SHA5125cbc00d3e86c3e616741ec52834a252ff47ac161dd528bc378da511be8feaa742f90c0269e065b593d4939f8805ceecc60c02f3aff8c08b4972cb394a7cf8cae
-
Filesize
60KB
MD5af7143ab674d60f5fa516932981db0b8
SHA1a912697c577d6382987afcb08e00c676fc4634ac
SHA256f08d06c5670dd7d47ef8f9d7d6e44d552faf8dcf245447d6db6052761c40c1b5
SHA512f9c14700cf3ac95bac9903f112665197d1a62ba4faff4aadd8ee385be04dc596588c0d024242136bfe8507be95979a7f7880ea995b2cdc9804898e8d1c8eef77
-
Filesize
15B
MD58045cecd3d5a4c893e3a75d47b17121e
SHA161f08d6c53ae857cfd4be1bf607a6c80e5e78b23
SHA2569bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
SHA51270d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
-
Filesize
512B
MD556ed9820030907c3ec9d9958eb02b511
SHA1dfe4c808ab3e45aacb0475059939e60face6a5a7
SHA256ea8c121c6f147d8bde0c9bb442fbe58e2a7b8f8667fc59062fb48a896307cd49
SHA51234c84824708829192efd2e3222a323344ba45a215342d9bb2526832af3eedec4a952c20afc47fe3e42404961911844bdce21cbed988acb7c8275b657627f1258
-
Filesize
16KB
MD57edc3bac27a99e32d79450f787033172
SHA18e66888dad1f72a587bc4bac9ad8a3bc77e5b212
SHA256b70ec98885561037775dd3745f43c555ef87e8c48c5728fcae7689eb7a35c6a8
SHA512126064e86e468654c0cfd08eac58c94e20dc14364ba7acea6d236605fc09372ebf8a214a2ebfb3387e6d90df65a85a984e90ed115b22f33c2796eca41e1a079a
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c2e0fec855d2e2b5a1b159512c9ccbe8
SHA11975d95c513e3e0fc0689d0d26d1f2b051ad21bb
SHA25607678e1766c0e6e5a05d85a83abde638e9b0b9c7372a25e3fd6d92baf7905a59
SHA512a76c15926ba689eb6f3b0142773c66e6c42a3e17de224362a8dfdc43d3bec62ee6809a184fb1990ed9d3266bef6f24871d158e15182946b7e64748710decbd28
-
Filesize
52KB
MD55e59c9b414ba45ab2df852b6010b4075
SHA1ba76b7fd76f6ccb5f919b7694ed848f5c42cd666
SHA256487f6db17c739f99d75d4aa113d53df59d02b53aeb949181614d58e6675e13e4
SHA512f145fb6885ac722bab111043a2797dccaa4335164e0776228937c19cfc9e44bc33fbf137fd0266f76c60896843882c392f419ee3006cb660bce047f511d3e7a0
-
Filesize
512B
MD5f9c16842feb9b27a18e0afbc9e3224e6
SHA185f612cf115fb941b44f6d6aea218e318e808102
SHA256ad07299ef137fcb8a47ad199f1e3146acd2948be86e50327d5761301eb3e821f
SHA51230d0298d2a68d00ef3042621b64050a446232113bb2c99f90d10a5ab22cdb910166f35aa7b1a2a4767098d42529f004e7da614dc5f00080a47c4c8a68de84018
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD5c64521e1e46a246cc36a51e9b9fd6432
SHA14b35b88cc0a7538f454912fd417752bfdb130eb0
SHA25671ffb59346f7ece312bb21e14d8069eb23b7f761f8a7728012a4556ce67b4e39
SHA512faa9653e1b60af7baed0c019b7dd726416193da2f0dc48f052664e339b9a2368e30dc4b2532a03fd5dfc5ceb411a44838ac44c11736b2ca4d9f7e874815e3113
-
Filesize
32B
MD57ec02146cb6ac51647ec753d0e0454e3
SHA1829dcea02b829b343690a1506617c7a6f2b6d754
SHA25677640af65052c2cc6d1e8cfc0c38fc6dbdf637c08b420eeb465a48c4b27b1599
SHA512eb2371c1ba96ab7e699eb05804f7114a4fab3641acc05c28a94ca9b5bd53edb04a27f55858bb245df42393f7e1ff8f02f36963371fcb954da6c96a09ea4c0804
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/043a4546980af65cb47d0569d04ff585.tmp
Filesize42KB
MD50d00273c319d976e395de951fbb74ef7
SHA1a753a33f23b62a68d3e3087aed1f1ee608479c8a
SHA256a375673567e7c35c4dbcb5159b1fec33632fcba7a2b16bcca3ff7d750263daaf
SHA5127cb21e95423a32901a1a00c76acac7220ceb619481a66a4590c2a52f1967b7419af2d853ddd9bd5dbd12cc9f36af81132f98a08fc1fda35195f558db151a478c
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/04bea68a58e8398ddb394565751659bc.tmp
Filesize4KB
MD56143355f74cf67de353ff915e382db9f
SHA1fd6c55fafabc383fd44c90de649a1aa17c1391e4
SHA2564268a7d7486343e3c7372d8c1623d3a19f4de5e22cd58b1edf08cd0ce6a52198
SHA512a47e13bfd3ab6a4d48189a4e9af9c9daf420ecf39c06dd523fd0d833c0fea23b035f7272a9260601767de13f6950e649db16a75c4c96eaa6a78db80ebe0e4f58
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/2357f6e75107019a023edb55b8c49a7a.tmp
Filesize34KB
MD5c096c6a08aa7aababe7e266c2b945cc9
SHA1c4e57323f0a8d590215ed5a57dcf49fbae294ea9
SHA25606213bcf93d83caee3b365110318620842ff90efc9b49d0e198ebe1c92d1df1c
SHA51297aadf9b710b4970a37a4008de20bc402b3ef918800a632f4111add697f97c755753be0281544d04bb2eb9f143871dd8a01251f0dde606a2572ed1bf3d248ed4
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/3471cc52acbffbf0dfb5c3795cf25463.tmp
Filesize25KB
MD55e718409a9187d9c9e97cf0fccda726c
SHA1495983056a2c83f6083c4d92a67f31134c4d02d8
SHA256a5ebbabd3c045152412541d7e0caaf77dce6f9cd8b18f74c02da4a28d45a6da9
SHA5128b179c04726a01c4f85128e61a822d1994905248326eb2df6b4f0104e8275ae0deb98a612e0ab68acb788d5a1bb4cc9f255c94c123e8eccb0a5a70a48a397a0b
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/3555d982b4fa1e53c29d0dd743befd2d.tmp
Filesize10KB
MD50a80b51bf9d5dd17522c71a5faf6520e
SHA1e76b19c5ecceb4543c0d7b0742bb2eb5097c24f8
SHA256321697bd968cad9043e2fdf0c890a8ba93c496adb59bbc5e127cabaad50ece27
SHA5125e360c59f9d3fa1c1197e3d664279c54930809cc1c7a7e2c68c5bf1f2caf9b4218d307e2b3a4e6aabcf3f223a8477a8b7a8e6ea9da726c2b7bffc5ea0d9fd4e2
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/4ed3d56aa6ea2d2f29123f21fdf1197d.tmp
Filesize4KB
MD59488cec293e781f52b61b6443c63c9c1
SHA1ffbc94f3fbe45ac6604797fe35c0cc6b816f012a
SHA2565f7b11bad66d7a82ff43e035f71f53b80dfc022e5066eaf3e3de5b08459a036d
SHA512f27c7699f8df4d310f8e3459f4351054c07dbaeec78b7fcb961a437cc6fa909c22872db89b5368a384a1d30edcf5d070ffbfe17c1ca770cd6738cba93bcef1ac
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/5459ba0982e111718adb7d10047f6eaf.tmp
Filesize20KB
MD5dc70f809a9c38733859add2f76a17d7d
SHA158aca0b52559d42a89afeae28e9aa92fa9eb0310
SHA25683bd113e8ff640c36e573d236c7920c5f672f9e351289a730c87c62b6ae2b6ba
SHA512f495a97404c6482e14e058808913afebaf308d2a7d43b269e8689961ee23dc46a484e2818ef6377b695b79b643d1b8b77ccf8856f0adc8b51ac1b53eddd2f93b
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/66ca9d8b9e1e0ea1b90f3cfbd6da574c.tmp
Filesize45KB
MD5b873972014e7c1e9c63f3eec3ba07cc0
SHA18ca44f18bc990d940f53d050b4109012a5b61f95
SHA2569b45c77f362549212d304fa8761c7c4d4a5ef63edc1e7a1db157265cbd76e2b2
SHA512d83cabfd9c61b3efb3f65a3d0f1d9e6bf740cf8ceb317b3ba1f25dd0ebb42b4b1173071f1db35c1b555b50eec3b2531bcf2e4f2893fa4967a03052aa28574063
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/6eefe83e73497c407205442b70caccc6.tmp
Filesize11KB
MD5e79871c9b5d861c984a5440835805961
SHA1ff74d12cc77ee076228ea82483215c9176f43c42
SHA2568d4492e079a6338f442d46451f72ae85bb246ae720b8511160f228c6d7554ab7
SHA5120ae9c2b0f21d32323414beca190e24fad8007d19b0d4a583431336b9a24e459150b331daa9c905f6a3e20c1e978765565a8edb3b787e485329d542a6792e6a9a
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/7dcb52d68d5a61c46cc5a51eaa492eb8.tmp
Filesize9KB
MD598d1f99a1a36fa2a6f893dcd83dc85a0
SHA1d8bd26995bbe3299d8a799a5c261b06959d50252
SHA256b7429c0430520e23ca43a4335d7e96879d01895931a02f848a5c4cb8e8f57695
SHA51236fbcceaba68876e5c1634774e7b49ed1c1148b3e99d74f0e80e755e83a338b40f7ae999f20f544217c64795ee14c3f0b76ee32ed920d5ff5b5c6b3bbcea198f
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/b4c23c2bded5637b164129deacb8a36f.tmp
Filesize64KB
MD5f44a1fcf0e94bd6fc8d1465416eeef33
SHA1c49d3957cc612b3f2e607eb8763b3dd6c149cb92
SHA256dead2afc259268e3b6631a7bd259eb0de3b1728d85cb17d05d4a3408c88ace86
SHA51221472f0469acb96ac38edf4537535601219cd26385a65b29fa7824355a0366a13d14dcc8a1e78b902a0bccc0d77d4e078a01feccfb42f6f5c1f57833f1b70b82
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d05761cd59552ecc68a4e158321211f3.tmp
Filesize23KB
MD5026ad10a875490cb29e3b0f46e375939
SHA1627048ae920b92c967c81e2fd046bbce7ba19970
SHA25603f4643bb7ce8c3b18d94ac4600b0207403c14ff42c846f6c0ff38901c10dc05
SHA5125cbd8f0d04f7be92d6e15c55583e49277613324d685fe5d99348acdab9e8da4c04439959a9d8f3a34c0d3e7cde927e8c5bcda8df57b3a1ee8ff8a8bb5685e452
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d23585684acbfb113966f18fe6548305.tmp
Filesize23KB
MD5b6b318b12a4429d824e64359c787c853
SHA15474ccdf469ad355cf69783e38905a6b12730d41
SHA25688fbce1408f9f44b84cb71b7881cfff3cb3175fa14e07524798f5c7cb593fac9
SHA5122d2f5eb945cfacb01661c490e458635e8cb927eb44b88f0a50d1c1da5b245b8d7f2a3ead4b1c17967fdbe11da42f8518be5fd7790537306ea63465fbce67ff69
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d3b170eaa988d478db6a557156ddc705.tmp
Filesize27KB
MD585cadfe2caab55142db73a6680c037bc
SHA1af060bde18e982bc6777bc0d2bcea17ab160c574
SHA2562c5dae01675c2330d8fa9283e14196fa1424b062e0c303eae1f150cb6fe48932
SHA512bfc4dad1bacc8a31d9d4ac73b5501e14d03139d4d517cfc39203c01d89a468c6e3bbf3439de08d1ff671e7b5299cfae880b583b27706b769da99fa490354f310
-
/storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/f0f700d25082bed2f9daa30cca95dad3.tmp
Filesize50KB
MD5d910d02a4c4e9f8a41c84d60cb563d07
SHA1d24005b51d133b4e6b31448d9d8dc4096db878aa
SHA256960435293754fd5cef1364c41e8e5b907ea332e56c7d441d053c904bfa231b81
SHA512a63f5a5544e47a2d11d342c1d41cf6dbc4f45f11c7b433ef40225a9ecd33885eda4deca676976353c7aa7903b1a9c9653bb1a30a2aa5690b9e7fc19688f2c0bd