Analysis

  • max time kernel
    142s
  • max time network
    161s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    11/03/2024, 02:23

General

  • Target

    bf97ea31b0e14bb6c504b110054f35fa.apk

  • Size

    24.5MB

  • MD5

    bf97ea31b0e14bb6c504b110054f35fa

  • SHA1

    ddd0805206274e6309b51520aaecb169ce9de45d

  • SHA256

    7e85b2eed5fb4dc2e24082e2741efb57bfe400caa59065c8cbfe87716e7be632

  • SHA512

    8385c3b14e2341170975ae2bc082015d1ed12bf5f01d653def5fe92f29032555d28613de6a1bdcb9b90e5fddaa36d55c18a0b532d3737c2a5a42ad99f73a0bef

  • SSDEEP

    786432:wxqJRylY+bdqdd6LEKPUp6e3cwDSOd3ikErEdQcsaNCPXvbHdaq8dE:wIJRysdfyUp6eMKvErECd

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.rong360.app
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4243
  • com.rong360.app:pushservice
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4293

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    164B

    MD5

    aba7a91f57cbb9a74ababf5509cb48d1

    SHA1

    13e7f1d82d5fc539847dbbf4f96a38c8884b3ffb

    SHA256

    38d0e85f6db51338544c195c1414c1eb42815a82e0ea8cb106f1ec847fe24c0b

    SHA512

    63be01d32b048d7c4d9d88f29627f10b8e5a7c593361152221a10909e3ab8bc84b30a08d96dcba2b694b46d52586a3c010db7a9cf52ea9bf3f623e5edd96d895

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    136B

    MD5

    7f0bf09bda64ae5355c031d850faa45c

    SHA1

    fda0dbc3186ffe9a12a894e86115f9df50fc8ceb

    SHA256

    afae1ff560e7895528c6707b435cb27581d3abd6a9dc809297902f4ccd17857b

    SHA512

    a8673b27af377c29ea6fe33df340f4a66f776feb8c7a28069965388df63334420a7caaf4e0505b619cf6254a7420b2384aacf4eb1145836ab1219426299dcfed

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    134B

    MD5

    ba81a9c5fb2ce72733336271904a717e

    SHA1

    6ef9a247a6a790568e0002d0b2fdbc8fd443477b

    SHA256

    ad638878847e0e850eca2644d4ab1ce17cd07ef429b35ff0f78f40ee84e6b186

    SHA512

    2ddfbd0f965cc742d83ccfbd560bca7482156af2095d6eb56579dcfbbb7363315a06e2017d25c2d6bcaa2b8d61980310c37eb85339f8fa8a6339ffd9f6797adf

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    140B

    MD5

    9875722ecbcca54f5612ebd3c0b59334

    SHA1

    2f414d88ed11fdc0448cdbb64d90ec66769066c7

    SHA256

    94293a432264cb576f226490bf2fb3e869ddb74bf705d20a3e6b8ca67956d432

    SHA512

    121d3313bc8312e4e7fa9a54d5d9d7b4ad6de36b5bbaba26ea24a4291bda0322dcf0a02c106b66d44466c720acd9c40e7492a6258ca8f1e12102d40d0207b287

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    135B

    MD5

    9a0fcae3aaad4022c814c34c5d06e318

    SHA1

    2432502e70f1008e09290da13794742ff49a899f

    SHA256

    dc3edf0747e0970c287d425ff12fc3c50c3f4391e2e2677b90dd00dbc291594a

    SHA512

    d88568c0bb41542da4abff4b8d207481120d644ddd0f6c3549929d08230dad8667b8898519b0fd2858de81429791161bdc2946f6d723a54d342230a0025dcd64

  • /data/data/com.rong360.app/cache/com/rong360/android/log/data/main_2.dat

    Filesize

    137B

    MD5

    1b9f04bc996405cce52f217dc3e70f82

    SHA1

    51b6c135dcc337caf3b640b099097ec9726cb20e

    SHA256

    2b49facd71624ae58368cb8710f99a48f2d5f638e8e82ae4a651da41d0271e24

    SHA512

    6c38f6f4908482cf9de8643d4730168b599b4e00eedf8902025cfe59e6c9e087f863a7c196a91635e5ab55e67ae6eec287a51e488c701cdc94bd6cc4d645e8a2

  • /data/data/com.rong360.app/databases/pushsdk.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.rong360.app/databases/pushsdk.db-journal

    Filesize

    512B

    MD5

    34e9db25f144aacc9dd30a813facd5e3

    SHA1

    0e496cf207bdb4d2392da503b7aef09b714a0518

    SHA256

    ec3192a9cc97a7f8f48ce98ac0c5810a51f7aa8850b46a33384d0d3b3f6b845a

    SHA512

    4412dcc4f07bc5a24cb4695f8f7ae83cc1fc014afb1a47ab4d50b482345d4195be575497d9972b48e00bb30628a692e5e9326da5660f1d405fd6d372cc210851

  • /data/data/com.rong360.app/databases/pushsdk.db-shm

    Filesize

    28KB

    MD5

    2d879f636fdef638b75ffd1fc260909b

    SHA1

    f1908e4a793e9aa39abf6a2cbb5aa5b113fbaab1

    SHA256

    80880876f6ea1f1b7a351c0d0208b083490c85e788165b5e105a4472d2ad1150

    SHA512

    f37f9ad28cbe4b283475cb4a7718ecd7ef43d9cc7bad00bb9d0a4fa5475eb774849e3b002cf27e691dced9faf98d67d6da108e47dc1ad6a350b674ea1b44700c

  • /data/data/com.rong360.app/databases/pushsdk.db-wal

    Filesize

    92KB

    MD5

    8a970a05f62e03794596b8167a90f4e6

    SHA1

    a73c4c02c812854d9148449f850a471c99b9de12

    SHA256

    e29be7bcbb7373192b902919b37b3a5b18d9362aa5ed7bb0bafe549b05a272e8

    SHA512

    bd8edaaedf0ee28e8e58e79c3bdf4c5029c6b6e2fcdc2e25340d9f66e48b511eb35e40ec6984e174cd7a088e936b6ecdd487c1b6c68d75871d20ae3f2753b3b9

  • /data/data/com.rong360.app/files/common_js

    Filesize

    6KB

    MD5

    b9affe610c7612d64ee5b8a042bbda5b

    SHA1

    daa41900031dbba0fdad6efdd3490daa585bfef1

    SHA256

    2e5be7f8b378ea777e6d9ea744a7f0cce07e103cda938cbb082fb2c8c9f241ea

    SHA512

    070eabffb07d94d062408d99cb9bb8b3dee9231ba10b2e5804601947d2e528cdb25bf7d917c2aee0fb5c925badf34228e27566e9440817a226f74c7ee80d5eee

  • /data/data/com.rong360.app/files/init_c1.pid

    Filesize

    14B

    MD5

    6de4a9afdd14625528c3996dbb9d18f5

    SHA1

    308a806475d927b70232045efec2423b7161a794

    SHA256

    2b49771b6b6bd0327153a454cc89fce415ce84ca5e798539fd950aebdaa92e89

    SHA512

    4a3476942273d7017b25f4c5210fc8f05c937ff3a253ec99c09dd93ff2cfe9a380a48ec8af0a79afefdc7206cd55413391f52a3548b628fe02c12c75514efa2f

  • /data/data/com.rong360.app/files/mobclick_agent_sealed_com.rong360.app

    Filesize

    574B

    MD5

    a467b7d34107413176986ea86e64ea15

    SHA1

    4cce49f224c730fc6657bed0df3361eea3d5723c

    SHA256

    0dd8a5d99c98acf10a85800b8ead19e2a24a093843a2ae3b89c0ee01bba52c00

    SHA512

    5f8a7688f012aaeb918c6a972c510ade25f009b0a227cbf9157dedc97d366cee926cdc4196a2eb2e425c00db0114c541c2bf5b8ecaeeff8d415a0677a0e0a8ad

  • /data/data/com.rong360.app/files/umeng_it.cache

    Filesize

    211B

    MD5

    4472e035d4ec23692a92909b974c70f0

    SHA1

    83ff2446bfbaafd9ebce7f3d0f6797b9f24857c3

    SHA256

    229a18d75de4887483e2476c59bd18423deed344212e0b46b8d33c2792a8856f

    SHA512

    a33e38278355a56a39a51f3e7970f7e4734445587b98bd4ed0c0f93897eaad6dfd013132427c86db0e399f27eef6e897786869ae1c22f86e92548ee7fca3fa39

  • /storage/emulated/0/.Android/.a4b154574052b48a9b945f81425d8adb

    Filesize

    32B

    MD5

    e42148a3cee4f161e7f70d84c8aacbe4

    SHA1

    bbfbb97e95e8bc397312c8b2b0215039ddb16432

    SHA256

    023389f9cad353b5e806c7f3be18314399d524209b2bbb25c47f43f889502b69

    SHA512

    45571c525e195248d18e8900534d4c1ab9d8b59099afb0b9a04e27c822e6ca4821fef1cab58a3e47445c40636a8f1ffc4742fdf8becd9892a973c3f20f71e98d

  • /storage/emulated/0/Android/data/com.rong360.app/files/tbslog/tbslog.txt

    Filesize

    3KB

    MD5

    b8a6ef240757f75ffd94a55d9eefe52e

    SHA1

    f8960546fffca5fa73b011cebb8c8f3e48a19d68

    SHA256

    d27489b3961fbe3ba0912721867440b98195063f4699607c8a37cd2ea987877f

    SHA512

    bc0a51548254a22b2346fc235b253db4b94d21afcad5078de35f1fe40bf5b09e50597d7dc64d5008b4e11eb1307e623cbfa191d632e478e4b8fee8cc0cf7ce1c

  • /storage/emulated/0/libs/com.rong360.app.bin

    Filesize

    71B

    MD5

    608ea85307fb3ad962bc5692dca1f6f2

    SHA1

    573aec403d135637b95ee50fd470aaab9e6908f9

    SHA256

    cb2724d5f49b090c3971d8f99dedfd1ff81a4c3956fc19934cc8a6eaed9d03cb

    SHA512

    733c03f603cd6836bfb39ba083f54d5b5632dde8ccf62f28e197ba83b1dfc0825af3f37f29d605f10a7628d69b8f3905e5422c402294e7346ca9fdbf12f979be

  • /storage/emulated/0/rong360/images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56