Analysis
- max time kernel
68s - max time network
75s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
18/02/2024, 08:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2cc9b9f0072df842408e57ecc2103c3a01d437cd79befd16c5d938cd855b638.apk
Resource
android-x86-arm-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2cc9b9f0072df842408e57ecc2103c3a01d437cd79befd16c5d938cd855b638.apk
Resource
android-x64-20231215-en
2 signatures
150 seconds
General
- Target a2cc9b9f0072df842408e57ecc2103c3a01d437cd79befd16c5d938cd855b638.apk
- Size 3.5MB
- Sample240218-kntaesge47
- SHA256 a2cc9b9f0072df842408e57ecc2103c3a01d437cd79befd16c5d938cd855b638
- MD5 d85d9e0b0f1c14749d1a718cb0734aca
- SHA1 e33290b9b5a36d9b76f55c1743fd87d288453650
- SHA512 c3d1c7c88921b7bed836c583af8345583e6e75ad35082841753a99c0364f18d20b747c01fbdb29c1764af0bd27b6e47274ddc1b3bdcacc3662ab592ed39d1c0a
- SSDEEP 98304:GXsOhALkGk8/GsPwRbxmqU0hjatwFhV6+wt+C8++mK:Oh0huCubxmJOatwatfu
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.keepmobi.wanningtaiqiudazhaoban.beta/cache/7c4635c98d084eb583d7e5222bdb9b4d372cd743345ab1d081c9b6e27c4a47f71c0e2a998030241a.apk 4909 com.keepmobi.wanningtaiqiudazhaoban.beta - Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.keepmobi.wanningtaiqiudazhaoban.beta
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.keepmobi.wanningtaiqiudazhaoban.beta/cache/7c4635c98d084eb583d7e5222bdb9b4d372cd743345ab1d081c9b6e27c4a47f71c0e2a998030241a.apk
- Size 16KB
- SHA256 424c07640fcb154a3f2fa3bb09414e08de34d65a34089b24f6a37429dac7d3ec
- MD5 5d8fa7e4a992bac6396ce786f741a91d
- SHA1 28a732c147cc9de8b656bff9fe74d9941836c8b1
- SHA512 6d443b4f020569143f5ed932c83a98a05e111f64ede7bbb40c40b791f1695ae23a8c1c9ce24050fb77495d33b2421628859f2c90f62bf3d3cbaf5b6ca60a7718
- SSDEEP 384:nYBPWTzszcjlHJSvlxsh0BehoY5R3v6wAoAqykWrg5l:nYRW35avlxxaoyR3v653kNl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.keepmobi.wanningtaiqiudazhaoban.beta/files/umeng_it.cache
- Size 148B
- SHA256 585f36b6af1bfad0386ea36ec8f1c70f369f3077213ddc44767cf83d4dca1283
- MD5 03e12fbc9484d15161426daf9f62570e
- SHA1 faeee10927d1cba90ffaa5d784e0584a2f6a0d0d
- SHA512 3c830bdbd032f140b227d3820e5739d016b24bf561fed9b7fcd91324d5031369e47e38a812ab3bd3baf692d7f438b7ddd7b724a5dcee37242acc49087af78888
- MD5 SHA1 SHA512
- Path /data/user/0/com.keepmobi.wanningtaiqiudazhaoban.beta/cache/7c4635c98d084eb583d7e5222bdb9b4d372cd743345ab1d081c9b6e27c4a47f71c0e2a998030241a.apk
- Size 8KB
- SHA256 b402f750086381d544422050e52b6e4423ef3c74354c34796c8f3de3b76cf224
- MD5 23ec781540ae809fa2547440a3915942
- SHA1 81873dc388e68f5a1ddee63e1bef9e0e8dfd55ae
- SHA512 7e3be7d1627165fca673bb5d833f263651a79a32aa4b260734ae3dd9fcd19f022c2cbc1b0c29afb70083022cfa7fd3072e2901b0b208d4f3a62fcc22f7deed55
- SSDEEP 96:0TrIyo8+qpXdSGyWHjEBOJ4XkarBvtXZiMUjAva+XqiU6Y3SRnrd1dN2dyd0dPdz:0JoYyW47tX2AvD9nYfWKYAY6TsYb
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/com.keepmobi.wanningtaiqiudazhaoban.beta/cache/crash.txt
- Size 6KB
- SHA256 799e94161769f08643532ba68df16ec386495fbc0fd8b3efe75a329e706a3963
- MD5 df492b01a4b9f626358b8af7df3138d9
- SHA1 ed2de197829faedcede5b4f32f2730174a64fa78
- SHA512 67da976e4373e8a2635b3242051e5de567c16d185065d7989b876ad8db31a294a9b709bcffde3f624908d20ee107755ae898ff82cf98d246aab70dbddbea46bb
- SSDEEP 96:sS/3ae2sdB7wJDPeSkSBTwzlB7wJDPeSkSBTwP:sSRDAXTiAXTk
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/com.keepmobi.wanningtaiqiudazhaoban.beta/cache/crash.txt
- Size 3KB
- SHA256 95ea3f06d195d4f1fa51d5bf3390afd3a857a6c5c78ad4ccb949bd81a0af25d8
- MD5 a1728b9e171d7c5f401b442ff080ca5a
- SHA1 b205eb93618e1e38085cf2411eb29c2a42989896
- SHA512 5bd160c1a521f813514cfd0af84d1016c549f406d3a2387a816041d8613408085d10f1a921ab523b0c72de0502c83006d1a8ac49d7d597f454fe0aeadb465fbb
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.keepmobi.wanningtaiqiudazhaoban.beta/files/tbslog/tbslog.txt
- Size 1KB
- SHA256 6949590b514f93ece054d8e6da33aef8ffa99f94c28a510af083f3e4d7f59ebb
- MD5 f95245646a40793b5d08f011eec8c2fd
- SHA1 d0ac2402ac617a5bde9ae8e245ce45ece7cb4592
- SHA512 7a52687b36548963c5e8f4f6a7c85321efd273c1ff3ae0d096a6f14b30170589e1b2bda8fd3fe959dcf9714ee7f0d5757767dfd8caed95bb335f3a7a36900916
- MD5 SHA1 SHA512