Analysis

  • max time kernel
    11s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    19-01-2024 09:54

General

  • Target

    675233213350f9c17595bfaab927ade5.apk

  • Size

    11.9MB

  • MD5

    675233213350f9c17595bfaab927ade5

  • SHA1

    79e5e11ffe8443f85095d6996be67b1845663f46

  • SHA256

    7879506b52103c40124a5bb569bd9b0ea7a0a19756db3646ff90a5d12b07537b

  • SHA512

    1d8a23d4c09be7c1994cae970868e24dab0383ae5ea7f4b8ddbf1a3e22fcd6f22113cb21bf2d43c405930c5c11c46c727afacb62bbc6f0f93541e9fed1f90c81

  • SSDEEP

    196608:AGOADqx5kbvRlKPU1JiqGzzGh4vu6fxsEoydyUExtbuGnrIU3+PZh8XSqUib0xNr:AGOeqx5kj/D1JiqGzzGhsfxe81EjIUOz

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.uzero.baimiao
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.uzero.baimiao/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c

  • /data/user/0/com.uzero.baimiao/databases/bugly_db_legu

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.uzero.baimiao/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    754f2691fd803427fcc338bb91dd5d07

    SHA1

    cab5dd63431b4bd0207eb200769face23e1075e8

    SHA256

    54dd4c6b3178cb191ac3f55803610377475f882894ca6d1633abf4a8e2f23570

    SHA512

    de439fdf15ab92e4091ba2dd7b1d871004dd7df72f2ed47bea50a1b036d776cab1552b23360f03dc2ca80381fa5e9fa52fef875bc0722ee714ea60a80333ec96

  • /data/user/0/com.uzero.baimiao/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    f049e7f667a352e3312a638e70976026

    SHA1

    a28bc1dde64d433226c31e3ef5da9a1d3ead2cc8

    SHA256

    cfba10959f3c6c5eefb46546523cc3e1088dfe3fd6bc7a649ab1d68382f69bc1

    SHA512

    551e43073d0e8d97dec115610af0f0db464d97f00f8687c6c53e1e6879e41399b312e50a70dfce487cc8295834071e6c755b9d531b18f5965a954807fb55e5f9

  • /data/user/0/com.uzero.baimiao/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    7341d340fc519ff000e742df54748705

    SHA1

    19fb39dbd1fc4e26d675d343308aeee86c82e614

    SHA256

    1b0d2997a35c5a1079765d458dfe1e8d3fcf21279f3bc025a017fe1070609117

    SHA512

    e5c879ab1bd98372650abb2ba675f1ba5eaf6f4f1049592857230d610518c2e35b7f066a39ed8858cd496da046b07ff322a99d4ca4475096829db8347054f49e