ff3c96e9215e754c24b825b6273af2a3f80cfe122a8f8f8366d14c25fed104c4

Analysis

max time kernel
148s
max time network
138s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
04/02/2024, 12:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8f22637c5ec26afab1ad12735620662d.apk
Size

24.5MB
MD5

8f22637c5ec26afab1ad12735620662d
SHA1

411032433b40f182a9e3293fdc8cbfc55d96cc25
SHA256

ff3c96e9215e754c24b825b6273af2a3f80cfe122a8f8f8366d14c25fed104c4
SHA512

7880b590968482e3b1389ede20bf5a0f32fe75246e9a7d173cafcdb9a90ed9e8c8ea6c9ac2b33db226e80f64245114c0d063dc1a4edf268777a4f025e49d538b
SSDEEP

393216:R06lUaV8fhYFszE280YCxwfZu92RIaSmyzVV7C/hJ9M4v6drUcH:RJm54QE280gZu9EIaSmyzTgOIa

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.ymt360.app.mass

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ymt360.app.mass

com.ymt360.app.mass
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4269

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ymt360.app.mass/databases/cache-journal

Filesize
512B

MD5
47b040c1eb4f5d6daa10bbd659b164e1

SHA1
6fb93d121413ad259861bfc99803789aef857a55

SHA256
9ec87bad000c74f0dba5711e6fbd231e492f6a40986fd2233709dc5a4866be78

SHA512
4ca9c282eed2c2cd72f4849480f5b86d3b86b44b75a28ae1cf6ee05a51a9cbf941f0abbaee31140ae7b3d0d1be1ccdc0b6d68a4ec2c451c6459aa40362d4fed0

Download Submit
/data/data/com.ymt360.app.mass/databases/cache-wal

Filesize
32KB

MD5
9170020ae1a065fe6449c8699c7d1a63

SHA1
5977254e13260235b825b44c2b8e738bedc89b32

SHA256
db0a6fb721ad79255486ceb6e90cc9e9706ce6ef956dd8b50e19dc41b0ef98ba

SHA512
557bf43929acc7f1864f6a615054c40e6ea1421cb9ecf4d6dc67bffdda16057d0f18fda83b2d7a03629acdb062521c9485d2caa76c69583255739506321bc455

Download Submit
/data/data/com.ymt360.app.mass/databases/logs

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.ymt360.app.mass/databases/logs-journal

Filesize
512B

MD5
95970e5fded2cc5a47b6dff5f95d56cc

SHA1
ae3c132c7c806e845f250729eaed2d81f9ee525c

SHA256
4f9343ebf6171e244c2c86b1fab4d9d478695b3e2c6d9acdc412a59feefa1e6d

SHA512
f8cb4a0b2bbbde8365e7c0b742e949e7f5d3fe1ef4bbd4c0b0d42f17b41b927633fc8c4fa3a82313c5bca6eec5d3eedb8d2beade0e13c22c174022dbac5addb4

Download Submit
/data/data/com.ymt360.app.mass/databases/logs-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.ymt360.app.mass/databases/logs-wal

Filesize
28KB

MD5
026aaa645737ff031edb58b7af8aad6a

SHA1
fc09c54fdaf4854069e9303adbd63dedc33fa9ad

SHA256
e1fa152252b59decb4e36e754896712d551f26b73b714f941670deaa7b2d2b03

SHA512
d2987ceb6468d0bb335e6893997248cbdb9a39212e57d59cafb1bcea50be9d1d4a80d4ae8e3a90b071fe4f4d687fb3586fd3458538f1a9b5006304bbbbf6e937

Download Submit
/data/data/com.ymt360.app.mass/files/__local_ap_info_cache.json

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/data/com.ymt360.app.mass/files/__local_stat_cache.json

Filesize
25B

MD5
2d805b13f2f28dc3ca9bbcc000f49bb5

SHA1
9eac165b4d81258fd3967cde5cc53b53b1dabcb1

SHA256
c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

SHA512
5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

Download Submit
/data/data/com.ymt360.app.mass/files/mobclick_agent_sealed_com.ymt360.app.mass

Filesize
589B

MD5
f2e5fdc78cf77a9fd2a12aa2e6ae726d

SHA1
60d7143120c2c0e7633f8064237cbea12a1d57f0

SHA256
1be15d7ec584f7d6e947bd16201100fa22ada3c971d95cfcde3722e24f38054b

SHA512
2d623c6df37d92ad99a085ff6e3e46c58182a62b96b3cee4336aabe1c53b4bffbc9aa3ccdd0a853fde6166633481b8b082561051205d46fcf6cbef2158323026

Download Submit
/data/data/com.ymt360.app.mass/files/umeng_it.cache

Filesize
211B

MD5
1e73ef76f1f9f06d03ab856143055cca

SHA1
cbe8af688a71348899f241d26e7674788cdefc40

SHA256
65d4772e55bf479703930bdc15f8c9ebcc0f40815e242d7e48c35fc9d4788890

SHA512
92222a97e96e5e79ae293b6ac6b475594c2ad457f6ff19f191443bc7baf546bc4860bb7e4fd8c02de200cc9835093e5b93fea8166a6fb824a6aa72807ec7d108

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
e25a2485b5ffdc45c8b6278127aae54d

SHA1
36d05c6f2e65d52f43035cd53f778b8241213d50

SHA256
43a172c00af1e08b4ce0418d2dbae9978ed97234a600442b42f8e6472da4d017

SHA512
f316b8d319c676c08f86b1c197414110159323431ee2581eddede722c8eda3b9291271cc8ee899900681456a3bc5e0989c51ea83418aed5c5918e384bc9e270b

Download Submit
/storage/emulated/0/ymt_pref.txt

Filesize
156B

MD5
ad214597e4ae9d8ffad25c75daafcd0c

SHA1
63f3c3db3215a2c6eb3ee5829ce53c7d85d57243

SHA256
90ae34570f17aec3d5deb822f77f2be94aef69ee0966716bf646a70ca5ad7b3f

SHA512
3f63297bde9c760fda6ede9650fe36fc38ca6d0fe2d2288dfa9d11524800ba4142537e2dd82fb546ae707a84249bd582c45b2892008bb005dc35922bae5dcea4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads