99303f5913e039a42cf0ac9e0ebee88cdb84e26c35e4f2080a0ca3887becb330

Analysis

max time kernel
151s
max time network
158s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
04-02-2024 05:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8e5967bf65de0807e9183fb874f9b371.apk
Size

19.6MB
MD5

8e5967bf65de0807e9183fb874f9b371
SHA1

6d38285eca91c60fd36a47ced78a87e92f1b8ecf
SHA256

99303f5913e039a42cf0ac9e0ebee88cdb84e26c35e4f2080a0ca3887becb330
SHA512

3e1fab3b88db344251df9bc73f53acab6f14f02aa5196b418a005b49881d65a53491518ecc3c3149f254f031c6289b5eb76ef9544ef9f77e5b7fafb71e4b7673
SSDEEP

393216:lfCsUCbXPuAW98tCcrsUuaJdLcWJt+JOXP60r+/ywPil3xX1BUBbazu:iCbXPuAcv3UuaJd4cj/60r+60itN1BUt

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.yonyou.buyer

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.yonyou.buyer

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yonyou.buyer
Framework API call	javax.crypto.Cipher.doFinal	com.yonyou.buyer:pushcore

com.yonyou.buyer
1⤵
- Requests cell location
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4256

com.yonyou.buyer:pushcore
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4290
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4343
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4386

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yonyou.buyer/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.yonyou.buyer/databases/cc/cc.db-journal

Filesize
512B

MD5
298487c904cdd688d5ba92de468e9cf4

SHA1
c2598ec694adb8a7bd8cb7ad074385aac565d724

SHA256
ebc963fc596cdbee873b34c027db9c03ae98893e31d714c526856732e4845317

SHA512
e23f46a570fc49816e935448f348a44018abd2fcdbf741be643346c21e9c69931f058cea70d5a4e5ec248644691dcc03b145c8d7bb5346fd1e23196218b188a2

Download Submit
/data/data/com.yonyou.buyer/databases/cc/cc.db-wal

Filesize
16KB

MD5
647a0035c8bffbbea37766b68ee6ec65

SHA1
9183b3b286258244b104270b20cffdba4f656b59

SHA256
bf3c8ecde6c22caa10c9b9c97cc93568efab45f2d6fe8feef92f55bf91d4e3d2

SHA512
f91c1557778168bad10d63fed19b296dae3f9a0cf8b7da4e5b1a5db8c420dd766650d9224ce87e47a80118dffda7b529f82b27d33877586f3d6cbbfbdba0cd6c

Download Submit
/data/data/com.yonyou.buyer/databases/cc/cc.db-wal

Filesize
16KB

MD5
30772ed1275c5acd228e111bb5c39d41

SHA1
28984903d26b5757f01d81052a808a70bb5f50b7

SHA256
0ab1c6d1c0c9c373bc4bd2b804fd9f6e7f204ae858738518ca27efd0a0c018c5

SHA512
d840f3feb51f2a7e3cc60bac42f30b019757e33ffdd9b15701c32690268e3196f33def3221b7587425c0c4a31b544fc2db6d20abca363798cf6485413352f985

Download Submit
/data/data/com.yonyou.buyer/databases/hhtdb.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.yonyou.buyer/databases/hhtdb.db-journal

Filesize
512B

MD5
d9d74dc5898b546c4adf37ea52c1aeb7

SHA1
c6961375ae861cdda2962c7300faadfea202e75d

SHA256
7bad3c58a223cc4a642ab1d1945f9664b8cfe6713f4d28228b8439478455116d

SHA512
b29cd71e9df1c56d0b51c589178464b43f31de3b29d0286e1d2c51dd809db49590bcf913d47aa377dbe8a731d049d691ffd99b56182f161d92a249d71f9fceb6

Download Submit
/data/data/com.yonyou.buyer/databases/hhtdb.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.yonyou.buyer/databases/hhtdb.db-wal

Filesize
16KB

MD5
3360298ae0f253afe05b88727ec5ca84

SHA1
86be5114c630d06b7ccbcc84e4dec8bca2bd7e3d

SHA256
62532c942d5a468d4c8aaa5bd02000e3ee5bf6a3a9c18ecb4021659aaaeced43

SHA512
488d2b275b5566c98a08533f1c0eb881a8eca91eca0645091c58fd5d4ba143d339aed215c6a077e264e3a8d9ccb77d9a85f05da7bb64bbf878c77c6c81d618a0

Download Submit
/data/data/com.yonyou.buyer/databases/hmdb

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.yonyou.buyer/databases/hmdb-journal

Filesize
512B

MD5
4967b1dc712ee88297ad48a667841447

SHA1
25655836b8d8f66b73eda550719bce6b51a30413

SHA256
814cd7118b22435d22044801b911914c3a2ba6d2789cd7e804ae0ef92c3412ac

SHA512
0e51ba9681a234e598c100f6a27e7c77cb6b29dfee18ce7f2c68855707a1c9895a8c7c7cffec116cb4749b707954469b7e468ed49b43a6984340b8288d59e083

Download Submit
/data/data/com.yonyou.buyer/databases/hmdb-wal

Filesize
16KB

MD5
1934d953e4ace410e29b3cac11558f55

SHA1
6275dc85053be236f60e404d28b8df592fc80435

SHA256
e214a94ae0ed2c6fcf24c9acfddd81ba4953ec25d7abb3b4962b48dcede5f532

SHA512
1ac75cb14f22b29d299e149c88fc17112e6699108fb349d53881683055ec3c59a8828a1186ef9edd9524479b05b2fda6fed113e85bfced84b1b6a0b5723ae0f1

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db

Filesize
20KB

MD5
ddd941b86921617e632ffded3c551f52

SHA1
e9f3fde85f279a8f6ea0ca02192d1e433cfaec4d

SHA256
5643b763de05df0615b433546a3c4d2da206d7589d7bd895f69a06df0e73b7ce

SHA512
79fbda1287d1fc7271feed958700dc7ce43a660e5ed6a0dc710e5c108807cc20c9ccd52690b7a6682aa4dcda36a5bf7fcbe6e04572cc12bc13639167f70f4709

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db

Filesize
36KB

MD5
60e918a66670488ae5e111bdcbcfa95d

SHA1
ee81e2f5ad9a7301adfce5999095370e532a43d9

SHA256
0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313

SHA512
1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db-journal

Filesize
512B

MD5
2113b26b541084bdd4432370c638f21e

SHA1
1d716f27b1e8fa11a3d42d566e76de9d5b3b7a51

SHA256
2dbbb3efd4e2a7b93931f3112b10172f09c3c943146a1072d175aea37767cbe2

SHA512
305d1a36fde80b3b5f1b48f5dc2e70f96670798ffe57514e98f7c63410db3be383d7b26a4f53d470e3606c004945abbee4b62cffc560a3b030f92e8141bc587c

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db-wal

Filesize
48KB

MD5
12bb2e911f5bbb3fb06cee2efc33bb80

SHA1
f547ba6d4ca518ebf5e95d3fb0a8531fc2beb0ad

SHA256
d28e8d2f7b17145ef13cdbc29a0a8b6939ff5fdb306bcb6966c824076264e77d

SHA512
f5c1836f8451321b5124fe4745d5b265360af1d88de84c4d6abee285276a1823caa0b659233f9c14dc1551fadaac5ffdd24c6638527d99372b9b8c74a06439b7

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db-wal

Filesize
8KB

MD5
68999f02def802c31703fdc6fbf3dd15

SHA1
af5403b731a05ef81d14c31d6ef43b3640dc841c

SHA256
a45dfab6c3220e8c3efff276a8bb6287b44b8840ef9d07a1547fd51bb9616233

SHA512
e4e57f730cb5df03ec60755e66e3030a42c2e53f75a46c66ff83769912893fefde8ce4924022859138ec07485fa1109ec500c17c3d79877cc129f59221968771

Download Submit
/data/data/com.yonyou.buyer/databases/logdb.db-wal

Filesize
8KB

MD5
5cc460c0ec53ff25029d2b526411f656

SHA1
85a5ab37018812e8978bf0040eb662482286bd96

SHA256
6b1e522b80d215d3c6d8eceadbb1051dca4e1bcd60dc712cbbcdbf8b785bdec3

SHA512
11d8ab9ee1c837e06056585fd70f9aa94e607f821a8c85381f60db7ec0c1bda4876d6dff0de0972030331e7148ab756cadc589b13ef5898ecbf7c7ca7d9e7ce0

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db

Filesize
16KB

MD5
4f7a4c98ed66fe4b8f7929912ebced0c

SHA1
1af6a93b749ad2355e7b14c8fbf94f2c9f8dbaa3

SHA256
529134bae83b5f4e5ad0d5b8d7c20367106e8a48ef0721612c0fcc30335406e8

SHA512
6a9a2c9afffea066deca02f4408e4464bf3f0d616484cab6a7c08c5fa50e4b9362c4cca6c309aa75c0366579502296530542107c0ca4b6bfe5fd751b8c337da5

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db

Filesize
16KB

MD5
96ac65296976f0f9c6b2ce4520eb6559

SHA1
eb33a20164ee0163cce59493290f6ec7914ba042

SHA256
20b054257109173daa74cf22b275a21d6467b877085e6ffde923774e5edfcce6

SHA512
0fd945c9c02feaeb58a34d68433e877baecd64e31b651754d2d27eb9dba20be45191c4f0ed19909e428053ecd3b15a045c0121ac3a6f101123c305801afef1fe

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db

Filesize
32KB

MD5
b3e039d65351b26adbd0737c51f147af

SHA1
58b239f25b408aae61bf16be034b08a1b06ca0da

SHA256
ece58a02a568b3bd18758187419e2d4aa7bb07cac9a6957fbef81721f0aabacf

SHA512
480f350cdc8e045355b0c6243fec027ed4ebc0aac6e767dbe3178eb3901110bb1f39c7d477d497eadc29e2dd9d99e27bffb2421c6d504c9d9803e79e4010e10d

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db-journal

Filesize
512B

MD5
dada7c905855b3da19b4092de32fb4d2

SHA1
464b08533e6f3dac5c09c8643daa6a0e76547576

SHA256
8069915c16f0d206824692903c5a03c1abbb2a20b6fe774795361b496cfd869f

SHA512
3b630a9a1d5ff44ebfc24759080b8f98572a6818960825ed41cd56171f0e0737152c4da8efab742db089e4372ca0015a2e28fab9c6fe9ee4944b3d642006222f

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db-wal

Filesize
8KB

MD5
056bccd5d9556140b9905f13ccce6b14

SHA1
b7d9e310553898b880d586e59ef62d5a6f07375d

SHA256
4e2921f691e9cc1045c3f94ee416022d58ac8ced8b85b6c7038c22a5f0319eba

SHA512
e3fc5b6d3308e89e04df11aff810fb5b67386eccd5702ed5056d53b0e6bf45d0c2fae8f61af62ab641d77468c0e29650e4a525f54bf87ec9a75df3ff1435a7a3

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db-wal

Filesize
4KB

MD5
68ddbcbe32c1c54b3031f64249499f52

SHA1
40ed2046b189c5990480e2327f5d9b56f9263f93

SHA256
6866d0cd2c74bfc37d5bcb7a440d68c188072d1a636a5aac2381f0b645a33a38

SHA512
e626ca2fba9c3ec0d97fbbff894f8d9895b9014382f376141c4c8f17cef90a21748ba8c5af3ff07c5e2f12b315e13312d9aeb3ff0aecb60536550ca8458f754b

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db-wal

Filesize
4KB

MD5
2c096c5d123792054d287873b1e45593

SHA1
921b73644602789044ba03e721f3a5d55d52ad70

SHA256
fd161df51c56c113e168f43218017af769b22ba5f332191b5b41848061a14ae6

SHA512
077e53180dfbd007988a43b39fbd235c607b32f6ab38ad658307da2222fe25c82bdac1cae1afca42426ac39ec6dc30c4f84b6d8859b53598deb01da680ea804f

Download Submit
/data/data/com.yonyou.buyer/databases/ua.db-wal

Filesize
56KB

MD5
e2126c8c7fa7f28cd1f43389db5f0138

SHA1
be09269907cb2b18eda3f10494424ddf422f7620

SHA256
0add166a6eec5f008d45469aba5ddbf56a62b029e0bf5eeaa0a18ae84d3db3b3

SHA512
613045128222aca85b23a5ba207b3c015fec5e11a33cce2377c5712aa1f8d86f68fe5bca96463136b38f154c0017757e29b7c7774a5d112988ad25f8f9ffa15d

Download Submit
/data/data/com.yonyou.buyer/files/.imprint

Filesize
1005B

MD5
c1cec1e7dbae62419e158a3ddf49c78a

SHA1
68e3cb549cf29110e234a0f8b1077ed0b4ade504

SHA256
2e7ff66387f7cdd421c19c26a3e2fe62319e282b39c5bed12f39ba3e93b95af3

SHA512
8891ab2acc6704ac2113f489f4d6dcd0e6c31e216104dc8230fd13f3c400b9c8eb773c68820b2fd2585f83dc75b18c81f1cd1c66e4ce055324b83a2af8356bcf

Download Submit
/data/data/com.yonyou.buyer/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
7be1908b5e1b170a68eed639a7123e2c

SHA1
ffb43b186aaabc160f4c53e3bac840ea277dbf5b

SHA256
55fb0ee11edddc7f4d87ff1553b0c4f688d4bbfbb7fc90a17f3959855e3d1c25

SHA512
e779298c4ac69883621004212536fe9299b4809f345656c1ed964acedbe41d9daaf88476b03c86bd117f4a60c1d74feebb82a9f977cf02cc06380b261c6967b3

Download Submit
/data/data/com.yonyou.buyer/files/exid.dat

Filesize
57B

MD5
f4494a2b2c7a0abdb046211d5a7da656

SHA1
0d03db1b10f04c24aa45ee534915d385fd6b3632

SHA256
541c565f2ef1ca6346b2137a288d290f43d63a5501b50c3af8ad78bfc58cd28d

SHA512
25cf48f8d08faac39883fc6dbdb0b7c92b203b9a6a78f78bb16d942411ca20c54e1da0eab8c48a9661781afaf2e68cb2c6395e58e2a6a9530ca76436dbd999cd

Download Submit
/data/data/com.yonyou.buyer/files/jpush_stat_cache.json

Filesize
129B

MD5
3e1d86422bf32871014733730693aef8

SHA1
e46fc0f87df83fae9393e5bb718198482a0f06c2

SHA256
47eb3a6b0b642db0bb1130819287e3810b7eee20f696a7480aa9a5c26ceac271

SHA512
eb907d42c9721eddd153b1f887171461c4036a9d871ceadc28571eedbbe8d1e6e24a47bb58c017ebbc9c9827a1d4391ea0dd105210841333ebdae26b8b19215d

Download Submit
/data/data/com.yonyou.buyer/files/jpush_stat_cache.json

Filesize
171B

MD5
3a0856ac63a95e6f514c36d4eceed65c

SHA1
3f8f1b98e19e67423dd30fb9ec2e3760956eba52

SHA256
be56a551024aff4d50ba588e6b29e9ecf75adc6eb78351c39c5d40771c8ff283

SHA512
6d7b956a9cad059ba504e984c0fc52274537ac81d18d353d67386d808320b2d16c04ac6a3e51874b5e1cdf7126b8eeefcd10b62e7f69968584fd9d2aa997bf73

Download Submit
/data/data/com.yonyou.buyer/files/umeng_it.cache

Filesize
413B

MD5
45af76d65978711c9503b9e981450698

SHA1
d7ca6e29cddc26b64bf6b03dc5c673c0aee88d8a

SHA256
2fa6a7d848eb897718dbe3fbc01c229743a3ad174aaf52f36aef1481c8e54c9a

SHA512
778063a188dcc7cccf27475065583f7ebfd4790dbc0dfa386bb7e5f6cb1c9b83fd93a5776b8f759e77555def66e13a36a4b44c0237087d35290b20b5cfd0869c

Download Submit
/data/data/com.yonyou.buyer/files/umeng_it.cache

Filesize
210B

MD5
0279dcb5684d96a8fb2ef92040ffdc52

SHA1
7e97b595a15d25ff2be6ba85f0a74b32f98c9dad

SHA256
7fd652b773e43d41bcc89415eaf2901da840f58e54a4023ca72f74b3b534ead8

SHA512
2454926e7973f29163959e81979358b92709f53d19de79d914f0817bc184bd61e2bd8508ce1c46dbf062eed30d9bb42784b4ee1f4a18f3ee607572c00265bfc4

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
6ef98be06e112ee50ad0ca14e8d3e31b

SHA1
1dc0a1f55d57c2e955004b925f9c3ab0304aaab5

SHA256
456228be7bb71cc1aba471804bfe21283f1ba8d602c372e63cbf9b2215c42e87

SHA512
6a959a842a41608ff8a3a7d1006a7da1820985b899b521c53d980f9f6be21dfbaba8ffef735722ee8774683ba39aefe29a29b7bfa894888231422904f733fb3a

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
192B

MD5
ad0235ec493badb014df7b7044c70be5

SHA1
a9216bf607af9881cfcfbb7cdfc2b1097a724ed0

SHA256
cda0d486501647dd89014404cd47536a8bb617e481a22aebde679f4bcf33cd92

SHA512
8de54c62cb5a7f6986c1c2cdf704c00c98a9a41d5b6533e8deb7f259ab2a28600f8c654600a31f6575131d8b535cfc615549a12efd2d4e78eada84099e910a64

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads