219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332

Analysis

max time kernel
11s
max time network
160s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
18/05/2024, 02:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.apk
Size 4.2MB
Sample240518-chb5ysfc24
SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vivo.sdkplugin

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vivo.sdkplugin
1⤵
- Queries information about running processes on the device
PID:4313

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

unionuserinfo.db-journal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-journal
Size 512B
SHA256 58b99ef3827b2bc6897fbff12f1666b78cd29156fb2cc288abd7cda49683d6c9
MD5 5c4dd5be808e3c752d89a4aeb350702f
SHA1 06d0035c8f1e20cbdc9c2c2613bf1564d5bf91a2
SHA512 6df44bb2e12a93b39f0f4927ae4202c6cbd94eb7b50b86cf4fec034d3a4cb0381588461b21b9beb1635da6c97823de6147ed33942049a63c49e96e354efe1716
MD5 SHA1 SHA512

Submit Download

unionuserinfo.db-wal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-wal
Size 28KB
SHA256 2144725d56790d62abfd946db0d7a0c5b6b2d7f91daa7efb8af4d3437c16a72a
MD5 0d7aedec86b306bd68d54b623623cf9d
SHA1 a082da2eddc5ef1fc5a3a9772e59a6f5d1e4c949
SHA512 0bef28ec32331d684291d0ee7452aede8b6ab02aa49bd63e8fd96bf147202f1cf1c5e4f603422c8333b8a29f8f48c4137a9fb7f86b450ccf1fd1aa6d106ee9b4
SSDEEP 24:K2D8GoMzyGSP/oievgQYhIoOnC3IoApcBGSP/oV:RDDoMzNSP/o/gBhIoOnCaSP/oV
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivo.crash

Path /data/data/com.vivo.sdkplugin/files/vivo.crash
Size 515B
SHA256 e74e1bb5a97ba0e00a8b1c9d8b8845d2e2a51728c4202fe903e2faaae459ae88
MD5 c054531e44c7d153f5185b9742e9e425
SHA1 6aa64ffa8b8293f7a298cd851665518690ab4e9d
SHA512 61a2fdb9d90c8389e7f20206254788d97d29fc8b79e37ecca3f745e3479c7e5165eae75b94ce33d6456256a8d38193f7790b890d03ada05d40903633f14c1d0c
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-journal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-journal
Size 512B
SHA256 4746d0ebc3991db2390cfead94eb57ebf82f1ccd4476daf7fd6e749bc99d6e37
MD5 47881b4b89e0bca5266c12b3a608f61e
SHA1 8e40b5ad6c545f931704d33b4376c26ed88b6429
SHA512 ef77f82c1448815f863a2301afe07fc9a88533494bcbaab724909705f42a417e43b2b900cf173877e587b408d715b8719742e9ff59b417f96b141f5f4c9efec1
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-shm

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

sdkaccountinfo.db-wal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-wal
Size 28KB
SHA256 3dfb4e6f1077cca1e71f93705a576bc4783af128f21a238e6b626381f0f4a06e
MD5 acc224dda42156be9e6b587c928aea9a
SHA1 87a1b0d58b11d2d2aa8e2b3fcf57ca70aa145a1d
SHA512 4ac75f4a8159e3d500b2d208197a056bcfbbc3eac6cf70a81352986b6b2de06a87c09a33b99f4777d020c1becc35a26e2e5f85b55eac1d7f40e6cf012e97ee56
SSDEEP 24:KliTW0o8zyGSP/AHSlSMBxdsHseE8YoxSFVGSP/PnV:p48zNSP/AHEzdsMeE8GQSP/Pn
MD5 SHA1 SHA512 SSDEEP

Submit Download

timestamp

Path /storage/emulated/0/.vivocrash/com.vivo.sdkplugin/timestamp
Size 82B
SHA256 d115cb16f6cab304711115476a7f6796471ac8eb3842a849f36b67fa55bf244b
MD5 83abef49ae0975e7a5fc34bcf39a1752
SHA1 4c37b316ed212f3c0f3cef1c2a7f29a116165a63
SHA512 c275f4784eb1c1a38a642fc6a9173778401fcf2c1d948d9465b313a3361c1c9f08354bde4b2dba1a2d88aa5c1cca0529487fd15d6541d273586377a53b8d6b66
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads