5368a69cae4ea094c1920c183da89549761f12b35611021a1d5a6f25eb6cfe59

Analysis

max time kernel
149s
max time network
131s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
26-01-2024 02:01

Target

76183e916d7d665953f8fb4e6302ddd9.apk
Size

15.5MB
MD5

76183e916d7d665953f8fb4e6302ddd9
SHA1

30b38bc28e10ae98a042e2ad9ad8e5ce641e9463
SHA256

5368a69cae4ea094c1920c183da89549761f12b35611021a1d5a6f25eb6cfe59
SHA512

a1255a84f44b7a0ebd5bc7ceb224e8de3ffd22b2f2c60571e23bee779ee332c26a0af9b10d2fba529455349e6afeff7f5bb2325699832fbb646d74796c8a0bd5
SSDEEP

393216:6irZ5OGeVBSB+7AsbNYkbrgFivtJCo/Ir3hmH5Y67xWp:7rTOGeVQGYWwCP/UmZp9a

Score

7^/10

evasion

Checks Android system properties for emulator presence. 1 IoCs

description	ioc	Process
Accessed system property	key: ro.product.model	com.kaoyanpengy.fangying

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar	4261	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar --output-vdex-fd=76 --oat-fd=81 --oat-location=/data/user/0/com.kaoyanpengy.fangying/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar	4187	com.kaoyanpengy.fangying

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.kaoyanpengy.fangying

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kaoyanpengy.fangying

com.kaoyanpengy.fangying
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4187
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar --output-vdex-fd=76 --oat-fd=81 --oat-location=/data/user/0/com.kaoyanpengy.fangying/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4261

/data/data/com.kaoyanpengy.fangying/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar

Filesize
20KB

MD5
2048eb6124a452540ee51dae4145aadf

SHA1
d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451

SHA256
105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864

SHA512
bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

Download Submit
/data/user/0/com.kaoyanpengy.fangying/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit