Analysis
-
max time kernel
8s -
max time network
164s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
07/03/2024, 17:38 UTC
General
-
Target
app-m5-release(0).apk
-
Size
4.9MB
-
MD5
c9aa3cc2c66812882e6dd6a8b2fde402
-
SHA1
b604f3e985221f4f8372916a8f66641a5e45212e
-
SHA256
577eb95db2467aaadf20b01d3c6b143598b70d165cc30f9964a65e5f262bdb53
-
SHA512
8de090b4824a6095a7609fcf56b95dfd41db95c0b082bc7a7ccd7eaa2f3d8cb15716794cf13851bfdf0108dacec6c26a32d8b5f1c82ff6370f7e54abc0d14db6
-
SSDEEP
98304:mHisXMhoC6y8JcHhoC6y8JctW7ctrMyjaUjWU4yS++N:mCBhoCz8J0hoCz8JkGcN/jBjR4H+4
Score
1/10
Malware Config
Signatures
Processes
-
com.xinkuai.nukllpack1⤵
Network
-
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.200.8 -
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.187.206
-
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN A
-
142.250.200.8:443ssl.google-analytics.comtls -
142.250.178.14:443tls, https
-
142.250.187.206:443android.apis.google.comtls
-
216.58.201.100:443tls, https
-
216.58.201.100:443www.google.comtls
-
172.217.169.78:443
-
142.250.200.34:443
-
224.0.0.251:5353 -
1.1.1.1:53ssl.google-analytics.comdns
DNS Request
ssl.google-analytics.com
DNS Response
142.250.200.8
-
1.1.1.1:53android.apis.google.comdns
DNS Request
android.apis.google.com
DNS Request
android.apis.google.com
DNS Response
142.250.187.206