Analysis
-
max time kernel
11s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
19-01-2024 09:54
Static task
static1
Behavioral task
behavioral1
Sample
675233213350f9c17595bfaab927ade5.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
675233213350f9c17595bfaab927ade5.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
675233213350f9c17595bfaab927ade5.apk
-
Size
11.9MB
-
MD5
675233213350f9c17595bfaab927ade5
-
SHA1
79e5e11ffe8443f85095d6996be67b1845663f46
-
SHA256
7879506b52103c40124a5bb569bd9b0ea7a0a19756db3646ff90a5d12b07537b
-
SHA512
1d8a23d4c09be7c1994cae970868e24dab0383ae5ea7f4b8ddbf1a3e22fcd6f22113cb21bf2d43c405930c5c11c46c727afacb62bbc6f0f93541e9fed1f90c81
-
SSDEEP
196608:AGOADqx5kbvRlKPU1JiqGzzGh4vu6fxsEoydyUExtbuGnrIU3+PZh8XSqUib0xNr:AGOeqx5kj/D1JiqGzzGhsfxe81EjIUOz
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.uzero.baimiao/mix.dex 4604 com.uzero.baimiao /data/data/com.uzero.baimiao/mix.dex 4604 com.uzero.baimiao -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.uzero.baimiao
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
292B
MD563f77f99bd2c2b772a479923bde11974
SHA1c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA2564c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
SHA5123aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c
-
Filesize
12KB
MD5171aedf968e17a2744d2585715606cb9
SHA1bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA51278a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
-
Filesize
512B
MD5754f2691fd803427fcc338bb91dd5d07
SHA1cab5dd63431b4bd0207eb200769face23e1075e8
SHA25654dd4c6b3178cb191ac3f55803610377475f882894ca6d1633abf4a8e2f23570
SHA512de439fdf15ab92e4091ba2dd7b1d871004dd7df72f2ed47bea50a1b036d776cab1552b23360f03dc2ca80381fa5e9fa52fef875bc0722ee714ea60a80333ec96
-
Filesize
8KB
MD5f049e7f667a352e3312a638e70976026
SHA1a28bc1dde64d433226c31e3ef5da9a1d3ead2cc8
SHA256cfba10959f3c6c5eefb46546523cc3e1088dfe3fd6bc7a649ab1d68382f69bc1
SHA512551e43073d0e8d97dec115610af0f0db464d97f00f8687c6c53e1e6879e41399b312e50a70dfce487cc8295834071e6c755b9d531b18f5965a954807fb55e5f9
-
Filesize
8KB
MD57341d340fc519ff000e742df54748705
SHA119fb39dbd1fc4e26d675d343308aeee86c82e614
SHA2561b0d2997a35c5a1079765d458dfe1e8d3fcf21279f3bc025a017fe1070609117
SHA512e5c879ab1bd98372650abb2ba675f1ba5eaf6f4f1049592857230d610518c2e35b7f066a39ed8858cd496da046b07ff322a99d4ca4475096829db8347054f49e