Analysis

  • max time kernel
    136s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    18/01/2024, 22:24

General

  • Target

    66304e82d4c62f046670d0ec68182720.apk

  • Size

    13.9MB

  • MD5

    66304e82d4c62f046670d0ec68182720

  • SHA1

    d5658fceeaa633b394c01f5e529c65e140b5eddd

  • SHA256

    0b037c147da72cc3f759f9b8a6250e95a6f6def6cf916bfabe6beb10eb4ef5aa

  • SHA512

    a74f95a84298e531ddc7eb9e3e6018e5de752927034e111f78385abc73a90da98936686711ed8ec2ae15c9b4b633f2fc7f03b6364d08a360f95fdcddc17ab569

  • SSDEEP

    196608:lclqh+fIYRDkUP8OMzfJnyba+FhhKQWQkqe7Y77N+ko12ebq9HLcP1IUUJOXUlvF:lcoh+6/zfJnyXjtO2+qZC6JOyvAJs

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.mobilewindow_HandDrawing
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4257
  • com.mobilewindow_HandDrawing:pushservice
    1⤵
      PID:4359

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.mobilewindow_HandDrawing/cache/MISSION_COUNT

      Filesize

      8KB

      MD5

      a0d4576fe9ef4ee1e3a694a3e69bed0d

      SHA1

      7dcf99282099ed763b82c94a743a75993579ead8

      SHA256

      68afdc4a1a6ae1a28c74bc2137a064fa7a0c34736055e7012a33b78c70625c6c

      SHA512

      5cbc00d3e86c3e616741ec52834a252ff47ac161dd528bc378da511be8feaa742f90c0269e065b593d4939f8805ceecc60c02f3aff8c08b4972cb394a7cf8cae

    • /data/data/com.mobilewindow_HandDrawing/cache/PROPERTIES_LIST

      Filesize

      60KB

      MD5

      af7143ab674d60f5fa516932981db0b8

      SHA1

      a912697c577d6382987afcb08e00c676fc4634ac

      SHA256

      f08d06c5670dd7d47ef8f9d7d6e44d552faf8dcf245447d6db6052761c40c1b5

      SHA512

      f9c14700cf3ac95bac9903f112665197d1a62ba4faff4aadd8ee385be04dc596588c0d024242136bfe8507be95979a7f7880ea995b2cdc9804898e8d1c8eef77

    • /data/data/com.mobilewindow_HandDrawing/cache/last_cache_time

      Filesize

      15B

      MD5

      8045cecd3d5a4c893e3a75d47b17121e

      SHA1

      61f08d6c53ae857cfd4be1bf607a6c80e5e78b23

      SHA256

      9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3

      SHA512

      70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099

    • /data/data/com.mobilewindow_HandDrawing/databases/bugly_db_-journal

      Filesize

      512B

      MD5

      56ed9820030907c3ec9d9958eb02b511

      SHA1

      dfe4c808ab3e45aacb0475059939e60face6a5a7

      SHA256

      ea8c121c6f147d8bde0c9bb442fbe58e2a7b8f8667fc59062fb48a896307cd49

      SHA512

      34c84824708829192efd2e3222a323344ba45a215342d9bb2526832af3eedec4a952c20afc47fe3e42404961911844bdce21cbed988acb7c8275b657627f1258

    • /data/data/com.mobilewindow_HandDrawing/databases/bugly_db_-wal

      Filesize

      16KB

      MD5

      7edc3bac27a99e32d79450f787033172

      SHA1

      8e66888dad1f72a587bc4bac9ad8a3bc77e5b212

      SHA256

      b70ec98885561037775dd3745f43c555ef87e8c48c5728fcae7689eb7a35c6a8

      SHA512

      126064e86e468654c0cfd08eac58c94e20dc14364ba7acea6d236605fc09372ebf8a214a2ebfb3387e6d90df65a85a984e90ed115b22f33c2796eca41e1a079a

    • /data/data/com.mobilewindow_HandDrawing/databases/launcher.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.mobilewindow_HandDrawing/databases/launcher.db-journal

      Filesize

      512B

      MD5

      c2e0fec855d2e2b5a1b159512c9ccbe8

      SHA1

      1975d95c513e3e0fc0689d0d26d1f2b051ad21bb

      SHA256

      07678e1766c0e6e5a05d85a83abde638e9b0b9c7372a25e3fd6d92baf7905a59

      SHA512

      a76c15926ba689eb6f3b0142773c66e6c42a3e17de224362a8dfdc43d3bec62ee6809a184fb1990ed9d3266bef6f24871d158e15182946b7e64748710decbd28

    • /data/data/com.mobilewindow_HandDrawing/databases/launcher.db-wal

      Filesize

      52KB

      MD5

      5e59c9b414ba45ab2df852b6010b4075

      SHA1

      ba76b7fd76f6ccb5f919b7694ed848f5c42cd666

      SHA256

      487f6db17c739f99d75d4aa113d53df59d02b53aeb949181614d58e6675e13e4

      SHA512

      f145fb6885ac722bab111043a2797dccaa4335164e0776228937c19cfc9e44bc33fbf137fd0266f76c60896843882c392f419ee3006cb660bce047f511d3e7a0

    • /data/data/com.mobilewindow_HandDrawing/databases/show.db-shm

      Filesize

      512B

      MD5

      f9c16842feb9b27a18e0afbc9e3224e6

      SHA1

      85f612cf115fb941b44f6d6aea218e318e808102

      SHA256

      ad07299ef137fcb8a47ad199f1e3146acd2948be86e50327d5761301eb3e821f

      SHA512

      30d0298d2a68d00ef3042621b64050a446232113bb2c99f90d10a5ab22cdb910166f35aa7b1a2a4767098d42529f004e7da614dc5f00080a47c4c8a68de84018

    • /data/data/com.mobilewindow_HandDrawing/databases/show.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.mobilewindow_HandDrawing/databases/show.db-wal

      Filesize

      32KB

      MD5

      c64521e1e46a246cc36a51e9b9fd6432

      SHA1

      4b35b88cc0a7538f454912fd417752bfdb130eb0

      SHA256

      71ffb59346f7ece312bb21e14d8069eb23b7f761f8a7728012a4556ce67b4e39

      SHA512

      faa9653e1b60af7baed0c019b7dd726416193da2f0dc48f052664e339b9a2368e30dc4b2532a03fd5dfc5ceb411a44838ac44c11736b2ca4d9f7e874815e3113

    • /data/data/com.mobilewindow_HandDrawing/files/commobilewindow_HandDrawing

      Filesize

      32B

      MD5

      7ec02146cb6ac51647ec753d0e0454e3

      SHA1

      829dcea02b829b343690a1506617c7a6f2b6d754

      SHA256

      77640af65052c2cc6d1e8cfc0c38fc6dbdf637c08b420eeb465a48c4b27b1599

      SHA512

      eb2371c1ba96ab7e699eb05804f7114a4fab3641acc05c28a94ca9b5bd53edb04a27f55858bb245df42393f7e1ff8f02f36963371fcb954da6c96a09ea4c0804

    • /data/data/com.mobilewindow_HandDrawing/files/commobilewindow_HandDrawing

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/043a4546980af65cb47d0569d04ff585.tmp

      Filesize

      42KB

      MD5

      0d00273c319d976e395de951fbb74ef7

      SHA1

      a753a33f23b62a68d3e3087aed1f1ee608479c8a

      SHA256

      a375673567e7c35c4dbcb5159b1fec33632fcba7a2b16bcca3ff7d750263daaf

      SHA512

      7cb21e95423a32901a1a00c76acac7220ceb619481a66a4590c2a52f1967b7419af2d853ddd9bd5dbd12cc9f36af81132f98a08fc1fda35195f558db151a478c

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/04bea68a58e8398ddb394565751659bc.tmp

      Filesize

      4KB

      MD5

      6143355f74cf67de353ff915e382db9f

      SHA1

      fd6c55fafabc383fd44c90de649a1aa17c1391e4

      SHA256

      4268a7d7486343e3c7372d8c1623d3a19f4de5e22cd58b1edf08cd0ce6a52198

      SHA512

      a47e13bfd3ab6a4d48189a4e9af9c9daf420ecf39c06dd523fd0d833c0fea23b035f7272a9260601767de13f6950e649db16a75c4c96eaa6a78db80ebe0e4f58

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/2357f6e75107019a023edb55b8c49a7a.tmp

      Filesize

      34KB

      MD5

      c096c6a08aa7aababe7e266c2b945cc9

      SHA1

      c4e57323f0a8d590215ed5a57dcf49fbae294ea9

      SHA256

      06213bcf93d83caee3b365110318620842ff90efc9b49d0e198ebe1c92d1df1c

      SHA512

      97aadf9b710b4970a37a4008de20bc402b3ef918800a632f4111add697f97c755753be0281544d04bb2eb9f143871dd8a01251f0dde606a2572ed1bf3d248ed4

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/3471cc52acbffbf0dfb5c3795cf25463.tmp

      Filesize

      25KB

      MD5

      5e718409a9187d9c9e97cf0fccda726c

      SHA1

      495983056a2c83f6083c4d92a67f31134c4d02d8

      SHA256

      a5ebbabd3c045152412541d7e0caaf77dce6f9cd8b18f74c02da4a28d45a6da9

      SHA512

      8b179c04726a01c4f85128e61a822d1994905248326eb2df6b4f0104e8275ae0deb98a612e0ab68acb788d5a1bb4cc9f255c94c123e8eccb0a5a70a48a397a0b

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/3555d982b4fa1e53c29d0dd743befd2d.tmp

      Filesize

      10KB

      MD5

      0a80b51bf9d5dd17522c71a5faf6520e

      SHA1

      e76b19c5ecceb4543c0d7b0742bb2eb5097c24f8

      SHA256

      321697bd968cad9043e2fdf0c890a8ba93c496adb59bbc5e127cabaad50ece27

      SHA512

      5e360c59f9d3fa1c1197e3d664279c54930809cc1c7a7e2c68c5bf1f2caf9b4218d307e2b3a4e6aabcf3f223a8477a8b7a8e6ea9da726c2b7bffc5ea0d9fd4e2

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/4ed3d56aa6ea2d2f29123f21fdf1197d.tmp

      Filesize

      4KB

      MD5

      9488cec293e781f52b61b6443c63c9c1

      SHA1

      ffbc94f3fbe45ac6604797fe35c0cc6b816f012a

      SHA256

      5f7b11bad66d7a82ff43e035f71f53b80dfc022e5066eaf3e3de5b08459a036d

      SHA512

      f27c7699f8df4d310f8e3459f4351054c07dbaeec78b7fcb961a437cc6fa909c22872db89b5368a384a1d30edcf5d070ffbfe17c1ca770cd6738cba93bcef1ac

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/5459ba0982e111718adb7d10047f6eaf.tmp

      Filesize

      20KB

      MD5

      dc70f809a9c38733859add2f76a17d7d

      SHA1

      58aca0b52559d42a89afeae28e9aa92fa9eb0310

      SHA256

      83bd113e8ff640c36e573d236c7920c5f672f9e351289a730c87c62b6ae2b6ba

      SHA512

      f495a97404c6482e14e058808913afebaf308d2a7d43b269e8689961ee23dc46a484e2818ef6377b695b79b643d1b8b77ccf8856f0adc8b51ac1b53eddd2f93b

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/66ca9d8b9e1e0ea1b90f3cfbd6da574c.tmp

      Filesize

      45KB

      MD5

      b873972014e7c1e9c63f3eec3ba07cc0

      SHA1

      8ca44f18bc990d940f53d050b4109012a5b61f95

      SHA256

      9b45c77f362549212d304fa8761c7c4d4a5ef63edc1e7a1db157265cbd76e2b2

      SHA512

      d83cabfd9c61b3efb3f65a3d0f1d9e6bf740cf8ceb317b3ba1f25dd0ebb42b4b1173071f1db35c1b555b50eec3b2531bcf2e4f2893fa4967a03052aa28574063

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/6eefe83e73497c407205442b70caccc6.tmp

      Filesize

      11KB

      MD5

      e79871c9b5d861c984a5440835805961

      SHA1

      ff74d12cc77ee076228ea82483215c9176f43c42

      SHA256

      8d4492e079a6338f442d46451f72ae85bb246ae720b8511160f228c6d7554ab7

      SHA512

      0ae9c2b0f21d32323414beca190e24fad8007d19b0d4a583431336b9a24e459150b331daa9c905f6a3e20c1e978765565a8edb3b787e485329d542a6792e6a9a

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/7dcb52d68d5a61c46cc5a51eaa492eb8.tmp

      Filesize

      9KB

      MD5

      98d1f99a1a36fa2a6f893dcd83dc85a0

      SHA1

      d8bd26995bbe3299d8a799a5c261b06959d50252

      SHA256

      b7429c0430520e23ca43a4335d7e96879d01895931a02f848a5c4cb8e8f57695

      SHA512

      36fbcceaba68876e5c1634774e7b49ed1c1148b3e99d74f0e80e755e83a338b40f7ae999f20f544217c64795ee14c3f0b76ee32ed920d5ff5b5c6b3bbcea198f

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/b4c23c2bded5637b164129deacb8a36f.tmp

      Filesize

      64KB

      MD5

      f44a1fcf0e94bd6fc8d1465416eeef33

      SHA1

      c49d3957cc612b3f2e607eb8763b3dd6c149cb92

      SHA256

      dead2afc259268e3b6631a7bd259eb0de3b1728d85cb17d05d4a3408c88ace86

      SHA512

      21472f0469acb96ac38edf4537535601219cd26385a65b29fa7824355a0366a13d14dcc8a1e78b902a0bccc0d77d4e078a01feccfb42f6f5c1f57833f1b70b82

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d05761cd59552ecc68a4e158321211f3.tmp

      Filesize

      23KB

      MD5

      026ad10a875490cb29e3b0f46e375939

      SHA1

      627048ae920b92c967c81e2fd046bbce7ba19970

      SHA256

      03f4643bb7ce8c3b18d94ac4600b0207403c14ff42c846f6c0ff38901c10dc05

      SHA512

      5cbd8f0d04f7be92d6e15c55583e49277613324d685fe5d99348acdab9e8da4c04439959a9d8f3a34c0d3e7cde927e8c5bcda8df57b3a1ee8ff8a8bb5685e452

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d23585684acbfb113966f18fe6548305.tmp

      Filesize

      23KB

      MD5

      b6b318b12a4429d824e64359c787c853

      SHA1

      5474ccdf469ad355cf69783e38905a6b12730d41

      SHA256

      88fbce1408f9f44b84cb71b7881cfff3cb3175fa14e07524798f5c7cb593fac9

      SHA512

      2d2f5eb945cfacb01661c490e458635e8cb927eb44b88f0a50d1c1da5b245b8d7f2a3ead4b1c17967fdbe11da42f8518be5fd7790537306ea63465fbce67ff69

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/d3b170eaa988d478db6a557156ddc705.tmp

      Filesize

      27KB

      MD5

      85cadfe2caab55142db73a6680c037bc

      SHA1

      af060bde18e982bc6777bc0d2bcea17ab160c574

      SHA256

      2c5dae01675c2330d8fa9283e14196fa1424b062e0c303eae1f150cb6fe48932

      SHA512

      bfc4dad1bacc8a31d9d4ac73b5501e14d03139d4d517cfc39203c01d89a468c6e3bbf3439de08d1ff671e7b5299cfae880b583b27706b769da99fa490354f310

    • /storage/emulated/0/Android/data/com.mobilewindow_HandDrawing/cache/image/f0f700d25082bed2f9daa30cca95dad3.tmp

      Filesize

      50KB

      MD5

      d910d02a4c4e9f8a41c84d60cb563d07

      SHA1

      d24005b51d133b4e6b31448d9d8dc4096db878aa

      SHA256

      960435293754fd5cef1364c41e8e5b907ea332e56c7d441d053c904bfa231b81

      SHA512

      a63f5a5544e47a2d11d342c1d41cf6dbc4f45f11c7b433ef40225a9ecd33885eda4deca676976353c7aa7903b1a9c9653bb1a30a2aa5690b9e7fc19688f2c0bd