9fafcb0b15af11c80844a7bb0441f321349a9cb6a7a838c8049b5a325d4573fd

Analysis

max time kernel
7s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
25-01-2024 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9fafcb0b15af11c80844a7bb0441f321349a9cb6a7a838c8049b5a325d4573fd.apk
Size

3.0MB
MD5

f657f65a0a02bdac981d68609251f03e
SHA1

978bc99ff6c510e8befad1a889ee8dcc80d4a41b
SHA256

9fafcb0b15af11c80844a7bb0441f321349a9cb6a7a838c8049b5a325d4573fd
SHA512

e0189910eed9eba36428a81738e8247d93f0e13fdae88c10c6529685d86ac49072b8af84febceeb5a0873cec6b6155895d48ddb7609496b95e13a2a9f391df5d
SSDEEP

49152:4Vz4uWQlIeYoiA3NaID7c+0gdIfNR/sCRJW1WrN/j3wiAXtTCg/p/e:4VRRlIe+alDI+0kqNRFJWEZ/z3AXLe

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.tencent.mm

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.tencent.mm

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.tencent.mm

com.tencent.mm
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4998

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tencent.mm/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
5cadebac91fd47487f760c9079ce7a9d

SHA1
846fda1f28af8ba2fe41f3605d80afe53eea2c8d

SHA256
e8ed493459eeabe6cf6cc29e4a7bcc3243ddad4169cb254163b5c1bc1f8b948f

SHA512
7cb8c5c331e244954f80511a73e19d9816ccaa77700e70f618b0dfafc5d232f659e7acc709122ec478363d4c54a5a138621d01eb429a3c954b2646fa7dabd103

Download Submit
/data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
697582e86da7024767d0e3c9d1912700

SHA1
756a020bc48193620a81c4eb3a36620ece447951

SHA256
14e93de079522ab4e57be331f125ac63c86b015f371516ef511b2fd2f6d982bb

SHA512
a7e276f1161997ef8ce091be0ebc2ac23ac2b47d682106164c6bde789503f915ee0a1f9debb12ae7bcb1c2f61a42630edb617ae676f77e856d28baad3eac948d

Download Submit
/data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
14603486f9d5b560daccd18e707060ea

SHA1
ce7766a9af8c12c41313b511ed45a47f8a1dad7b

SHA256
66f31bc74f37fc5477d9be6d8de175e81fb6eaad99d2b574421dce2eaa4f4f4e

SHA512
36e2bf03776e2effd76241b713aadaeeeb64bb60d6676e641a5ea744797a27698ae10d0dc9126c789eadfe71b216665c824f4cd48f53cf001cd48035cae78160

Download Submit
/data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

Filesize
156KB

MD5
b729a01c1b5f80f90d99ce85f89293c4

SHA1
6dea9c2be618e12062b9d0cd31c7f4d612af5704

SHA256
27d55a21696fc50d996d0a48a2f4d013eb20c520aadce22418551ccd6b3f529b

SHA512
ec85f2514d087176c80c92247c928aa5a77f5c1af2be970e3e64b7925bf627cfed6084eef9047b936bed3b8b9322e717311aee5ed2592c7db2e66331e8ea732e

Download Submit