Analysis
-
max time kernel
6s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
29/01/2024, 13:26
Static task
static1
Behavioral task
behavioral1
Sample
7ff2e6604a1a93c2f359d95fe5b520a7.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7ff2e6604a1a93c2f359d95fe5b520a7.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7ff2e6604a1a93c2f359d95fe5b520a7.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7ff2e6604a1a93c2f359d95fe5b520a7.apk
-
Size
9.9MB
-
MD5
7ff2e6604a1a93c2f359d95fe5b520a7
-
SHA1
304b00fd0032ec0fa3937d87af7b569c4b9c7d8c
-
SHA256
3da0e183a5368e26000735f32dce4a6882b766d86d674478bd7af2536232c952
-
SHA512
f5b22d11980223d85f14e5ab3605a06b3c08afb9f2c5234d50105c12a2a5a190323f53cbc74c6223ee7dd16722e457f703bd1cefa27ec2bcce5c36f3ce1a9c5f
-
SSDEEP
196608:+hQf7jKQCNexBvdxtMuLrWijj0uDGfDFzODvP5PqC52VJgGPBZbvAfO3ySFFVaAp:M47BCABvtM6f0uGfJzA5CCcvJvTZF3p
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation cm.dxcyykshi.a20140927074349 -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal cm.dxcyykshi.a20140927074349
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/cm.dxcyykshi.a20140927074349/cache/feiwo_dir/storage/emulated/0/feiwomob/cache_2/-2054404330
Filesize138B
MD521d23f94fade87dc50d8d8aed049d8db
SHA1fc7f57e872a0dde2f50f4ddbb1b7dc41b6c4e778
SHA256bfc864d5238f57e0fec29342f01ebcfec2bc93b52100662db8e67511f298074a
SHA51256f30f1e9f82b168a3dd37a8ce4421e958efa14b1fa360b1956b18ee550f09153f728251fdf3634f404342cbde55427b421c494bb37bfb6b59f21447b6f695f1
-
/data/data/cm.dxcyykshi.a20140927074349/cache/feiwo_dir/storage/emulated/0/feiwomob/cache_3/-2054404330
Filesize144B
MD5ab9eea0c8b0d7684a952bd5449d5dc90
SHA1b14926134ef7e8ba995d52ab06b4ce420edcce9b
SHA2561b58fa217abc5a42d5210ce5b32e5eb2dcd8ffc87755460e4316b8cd6c25bccc
SHA512a197dff03023ffba2fcefc80c979c11fa4d9e3aff59aff2e78766779c153c0c97a2d0b96c61f46b2a672704fe3ffc202fc8c7258059f908745ee6d6e2c3768b4
-
/data/data/cm.dxcyykshi.a20140927074349/cache/feiwo_dir/storage/emulated/0/feiwomob/global_cache/1807629056
Filesize150B
MD54810ed76adcc9d5e5d34ec23e4b512c3
SHA16fb87c1efac1a1b2b4da10a2343102dcc380ff5c
SHA25664e8b7229ecc5a70f80b5c84f83245e79b26e8106146c55a8f1b0af124d633fc
SHA512f1b509324acfec45ca22199a82a68c93ff7e55b1d60e11ed2beaf5510ae94d1fa504b82eab48ac13b1152e05c5b41ea7b1182f9f684c436e41fb8dfff2c2ea7a
-
/data/data/cm.dxcyykshi.a20140927074349/cache/feiwo_dir/storage/emulated/0/feiwomob/global_cache/1807629056
Filesize179B
MD5fa5a8bd6b3a39e565072db7995800171
SHA184e36877b3f0c371c487188e9daa2c58c10844de
SHA2563986954a76292218babe857a00b8a6685411ac8743493cb1217474fe168f002c
SHA51239c05d6c7ecffe52f9c59376b5b3dc2e693688aaf7a11be3dfd23a1a569884cc958356f1695b642b81f44a6c95fb28aab619aeca5dcf40796a9f9ee0d993d4ac
-
/data/data/cm.dxcyykshi.a20140927074349/cache/feiwo_dir/storage/emulated/0/feiwomob/global_cache/1807629056
Filesize191B
MD5eaf1520a080eb3a3bd5c6faa2bf05832
SHA15e2cab2569b47ec8b84bfede3225c2235408aaac
SHA25639c7794c9e75f1dcb71835067e2d9b113dc04b6ea603d609be9cbd6ba32d30b4
SHA512d0f753e56e34ed36925b2ce323c5be939c37056938c8d7cde4c69a4c2f33942c39dbf4394febe62228fb45559e5cef524d5dc7f20156126f5ac897e0a3916eec
-
Filesize
1024B
MD5504520f15f53afb00dda405e406d5527
SHA1522682b2d6dfd7569541784ebb1be447a3cb33f1
SHA25669967b161e120fa0e958f7f4ae9a0c6c17a932f32fda3a7e07ae43f54bd254b5
SHA512c7229164a6dc9d937c875e74834762497b2d4176ffab784a7a5fa2ed6f1a9b466b49ca019b71a41edbcef994146382a07010ccdbf66e2773d1bbba7cd4d11459
-
Filesize
23.7MB
MD54b4130fea4f6ed557d5995ae053ab1d1
SHA19b30196270cf119f4d14434931c14386343ae773
SHA256178c67e761fb3b2a18f6dc6f1d954ef07a9c2f402a8f090006135ab47525f943
SHA5124258f0506f7479801ac50f4cc4a171ab17acf8de37e2ae07b624a71418411c8162cf1b33547a045fae196070ad48325cddc82f7824ba2e5ba6589e846cf61ca6
-
Filesize
1KB
MD56183d210390545a551abca5838b46c9c
SHA1e4ff4415c985a869b3ac29cd42d1a785bbd8f4e8
SHA25660400e381c73f503a0e11636ee2be6aa0651f35b0b99276b4ae457f5185f6ef1
SHA5125c7f672b473e9566e4cdd579b440d10865233c3bffd3982271e7858a0e6ae7bd8216d154f2621001bf331a50e65b3fe46e1cfe612a9669c81ae4eec07979a6dc
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
4KB
MD5567a575a4a5bf886c8feef3ca6c977af
SHA1a29ac55f6dfd38f26f1d3275080c1c1e6c09a03c
SHA256f84e6270d589ad7786c2a8df38d862a524ec3d90b9ca3615073d5b02b28eab75
SHA512d1f2cc9a48f243af7cae0cec27a985741ac41bafb8132c2557d0d19c8214adb9601f37958382b97021d7a7e807a96c6101e5cac45aec286d8da3e5d29cc29976