Analysis

  • max time kernel
    124s
  • max time network
    179s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    21/05/2024, 05:31

General

  • Target

    app-release-xjtwms_3.5.2.apk

  • Size

    8.2MB

  • MD5

    ffe2c01f8b01f24024ac30dd3fae2928

  • SHA1

    d81ffb305e08ec2a74e0a5f7fcb81ecace2dca85

  • SHA256

    33de507f2e632fd8a67e221611c8cf36e5cb313d871200d7b2c0cecca640d593

  • SHA512

    3fe450a0ad3f9e1aa11a576f62ed4e18d7a43b87104274be8736f35acb0ff4e06cafecdf549bd9ed914477ce6181d942d651016eb384f5eda996ffd0cc297528

  • SSDEEP

    196608:sQcWnn0R1T8KMHWf2JPyl1Um/t0AIXxNEwszmh+ZdsC03RZyUHFrG6:d0xnl17eLFh+ZdR0DA6

Malware Config

Signatures

Processes

  • com.xjtwms.www.wms
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4288

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xjtwms.www.wms/app_crashrecord/1004

    Filesize

    229B

    MD5

    7eb6d57f578698ba8dfcbd92fb6ba173

    SHA1

    739b5bff8e4e43dcf31b4345855eb2949ec90292

    SHA256

    b0b34386437168356a841d25433432c9cd46ef4441810d28fdde0267d856a464

    SHA512

    f49770f14e00b2713d374ee9c9fd0e7535e929ed61bd76b4b13df0db82342a6fce063b5073ceaeebb3385649bc0fd8dc4888bebf983210e571fd0112a5b7149a

  • /data/data/com.xjtwms.www.wms/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.xjtwms.www.wms/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.xjtwms.www.wms/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    2c2e121c16eb0722eee6f867c74b9a81

    SHA1

    b332d594259ec39a9f3db9a3fd0980bd33e43873

    SHA256

    56b51366aa08a534f557c37102f29df877d737a7af4af7029239e77f22e12aba

    SHA512

    5492afa5ce73576b7184d76f0828a5de02141cba5cc4aa816ac3155daf0be0395baf0e04acaff47d2c0589f44f37da546781456575db11614f93c51bb386df26

  • /data/data/com.xjtwms.www.wms/databases/bugly_db_-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.xjtwms.www.wms/databases/bugly_db_-wal

    Filesize

    84KB

    MD5

    6308ccfb1819440dc78af4cbb60e3348

    SHA1

    472f0d0938c2a17d4f4265c59b1aab4f2a1894f7

    SHA256

    23cf37b8956b0327b7292d20022334e261145806a777552b87f1ba9accec9780

    SHA512

    bb2dd5bec1bd6b2112f44fada8c0d307ba012f41e0c1c42ff405a1218c823a11341b13bf44bde6b0c87b4d4baf968d82e49efabe8bf0e659a3488ddce60af884

  • /data/data/com.xjtwms.www.wms/files/bugly_last_us_up_tm

    Filesize

    13B

    MD5

    af406cf60ce0ff6e515175e4f6467fea

    SHA1

    9e28ce40df2454fe5ad08c683255217d512fb9d6

    SHA256

    95e1260b5a6ada3430397098a64f262c735f55792099b749eb71517c5977e807

    SHA512

    fd3e9a1fd25bfd2ad3b9162934c1251a41153b85ef66203f1715607af439559fc31582a34af1cc9f6188e2d3fb6cc0c1bbc78bb2b8e851fa228eaee2098912ce