Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    14/03/2024, 14:26

General

  • Target

    c8d7080d63a583d37921e37b8e404845.apk

  • Size

    5.9MB

  • MD5

    c8d7080d63a583d37921e37b8e404845

  • SHA1

    f836247941c9b9b15014cb479781793f61f1a664

  • SHA256

    65cab20cde078316ec9c766266a8c9373653bbaac997286a75c58a331e7c9e88

  • SHA512

    f89c54af38de7017882cafad5cb48962c5ca8b2da9a93539b3c2e5a0abee56bbda37489f6516a3180685690794bfe4f1e74af26c1802b7fbb27c47ac49361250

  • SSDEEP

    98304:DSmIoAFE48UJNU7ai0t9XMohdcgPcOifp7oyU1MhLeqBW/npMM2yhzH5Tsckw/HE:mLVFE42a75hqyij0uehqM5NTWw/HX68W

Score
5/10

Malware Config

Signatures

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.dgahbgackhmcmlno.qiangshendoudou
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5029

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/.um/um_cache_1710426485919.env

    Filesize

    561B

    MD5

    59fb1b7688b89ec79beea152b8667896

    SHA1

    594efa0892206234165a805825ae6f2aa5286f63

    SHA256

    93f491fb8efd8b95b87d2d1335bcd27171ce4b25941991a078ba62df5f6d95af

    SHA512

    14262cb9d4f400bebf4d0a80df477d6fe9ef774a36f81054987c37c92b39c8035e5af3e7e4e5096e8c3bfc5b023717c641f33b69017ebf8908233b819c5c62d4

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/eventservice.jar

    Filesize

    217KB

    MD5

    1b0d940ba231198229eee34e553c2136

    SHA1

    d09bdb266f147eb28bcaaaccb94d4d5343055867

    SHA256

    ecc1b051d8857a396902697418cffc8f54627f26515742283f3cae7c47e23e71

    SHA512

    8c1bf4c6726a32dd91bfa34be3a46ea5dadd060d98437f8674c051af7f57383de23ee73af6a257be5274e71ab4344f805d3f473c7794c3d434a4215156dfece9

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/script.atc

    Filesize

    7KB

    MD5

    20d3a7d53c72a37ca3c91d449d851c8e

    SHA1

    2ecb168acbf428ce9cc4bc226070422ab3088755

    SHA256

    6fa9776cfa0fdde7aaa7ad1215b4fab2d7e4b34a7556a6cced3fc360ae78bbee

    SHA512

    4267c17f4a2ba6b06f4d66ec04e3819b00513f83b5f313ab8f710ab23ebbd9ab03a8b6aab44d1a356d56496dadbc6e43067351c81754fe0aaa5506cb23f830e7

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/script.lc

    Filesize

    1KB

    MD5

    705031d29d536ce084020d289461282d

    SHA1

    878134ab4cfd1222e29916b0f4a40e41cb7ef63a

    SHA256

    5eca1bd35edef0f9c5b11b6fadce13359eb1225faf78adf548b01af8963fffe1

    SHA512

    cbf241a1537ef8a721792583d00a754f992b87d82abb89c8d22ffd8b24d6c227be22f3046f1cb5daafe469eab19220813a62371245c5a5367d2bc6ac25565b90

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/script.prop

    Filesize

    307B

    MD5

    0e2bd76ab3ba2df6504df4f33bc1b32d

    SHA1

    fd7b091b59ae4cf5f2da4b7b66eff9145a0d889e

    SHA256

    77df837898d3ad864a8db7ffc79a6935df5bb77a771b54708c91c179ca09d35b

    SHA512

    20348b5267282aee16814ba2bc977498ac2fc8cd42bfc9c32f11b36a451059f4a2870a4ab5b4b398aedcc400cbff0ee0719cc606530aa455ad9d8c16d0031d48

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/script.rtd

    Filesize

    864KB

    MD5

    0c3c8c919c4132596acf31eb027facab

    SHA1

    1b6bb54eb45a427ec36bbc6a7426383876b7555a

    SHA256

    274981072680c6f535fdb7b78529d2419c452b1e17f0a999d09a2b8fba649493

    SHA512

    a0159fa19a5c92c6f5b38d3badf15591abef8ee53aa127771ad28d82c19f34dcd5602d1646d66893d0e1f536703e249b34b3f803f1b315adfdcb3514a73e4804

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/script.ui

    Filesize

    1KB

    MD5

    65bd87a4d0f8b33c63c23089965fcaa9

    SHA1

    5231f6690d0333123d1673b111ab0054fec72004

    SHA256

    91261f80f27a9c4c57fd757f500b50148d9b52281a3183d8c339185359c59d31

    SHA512

    ca2e57d1c6326ddb50cfc2a166f8ec0c7d25d538b7c41c4890a063645b3019c08461a41e797a53a7d20a232d1b4e12d8af01e150df0721826fcc8368f054a5fa

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/start_eventsrv

    Filesize

    327B

    MD5

    cc047ddb391c30c3be2ec6524ac741fe

    SHA1

    bfdf62e60a73a59a427755b047d543b047725963

    SHA256

    f7c1b46451abbd19d4ec899b9e1f71323dc6bc546b82576a31801c6beae947bd

    SHA512

    feb763d4909c08f099a6fed14a4ba8a7ac4fbc5524897f0e3b47760b89b91af9b8b7a0f94aa37d00cbfd9aee2a5021fbdf629d0fadcebd10fe94b0fe7c6545d1

  • /data/data/com.dgahbgackhmcmlno.qiangshendoudou/files/umeng_it.cache

    Filesize

    245B

    MD5

    96e7d60f34e8de4d441bfbe888684e83

    SHA1

    12ffb3619d2981620dfd900f5468d1886592b2b9

    SHA256

    32dbd2aad36d76715672e7fa60f30ad0233665d9daf0b3a802c79b1d6273f5a2

    SHA512

    edb592c8d1522096aae07d2a97bd00044df760dc484d53d4f653785f090aa7a4a5e7a48145a37212c3a7ee22d1958970da3a0edf327463912b5be926ea4b2992