Analysis

  • max time kernel
    128s
  • max time network
    150s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 12:02

General

  • Target

    iot.apk

  • Size

    11.1MB

  • MD5

    b72450cc857911ce1c1b31edac052043

  • SHA1

    29416478f589e6238056ea69b4d4a4b05e14a657

  • SHA256

    0cfc702d274e88519d7bcfff4c6c92fa7d09d21c5d5740ec97a192e09fde5f7d

  • SHA512

    22422f00fb60286aa12d44b96ed43eea577c01d189169d0f17d5d593bd120008722f051b5060bb6f8b891f93884c30a4112169f72e8e03c3b54c1fea3053f382

  • SSDEEP

    196608:JIHSNgqI1LrHgLjgqZ9g9O6er7CxxTm0o7bvlwcRYnlj5+sTB88nyB+QC1MYPuH:J11I9HgLB9U8r7gxMwpnysQCMf

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • uni.UNI8598589
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4265
    • /system/bin/ndk_translation_program_runner_binfmt_misc /data/app/uni.UNI8598589-GSVeslVc_RiaUQbzNbswXA==/lib/arm//libweexjsb.so uni.UNI8598589:jse 49 52 1 /data/user/0/uni.UNI8598589/app_crash/crash_dump.log
      2⤵
        PID:4306
      • stat -c "%x" /data/data
        2⤵
          PID:4367
        • stat -c "%x" /data/data
          2⤵
            PID:4558

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/uni.UNI8598589/cache/cache/weex/libs/weexjsb/armeabi-v7a/libweexjsb.so
          Filesize

          4KB

          MD5

          7628e2d9516f46d07f47636f323b1186

          SHA1

          1cc64d0e9b4ae930ed8d46904b01f99feb6e09cf

          SHA256

          13f588ee6494cc79d11c1ad39c50689d228bd054ed1da52f084b0feb708e14a0

          SHA512

          f56bfbc93b119ab9aa656af00757c2d46afb01234b91644d6b020bc2ccf3ae68f88e6df8757963f8af8c29325364b97252fcc27debca20cce88eec2adbab4eea

        • /data/data/uni.UNI8598589/cache/jsserver_start.log
          Filesize

          46B

          MD5

          9d8907fc1ea8440dd2d2de22236cb07d

          SHA1

          2e81f3d80b5459baa9a8c5a50cc901e7716a726c

          SHA256

          48e0abdab7c305ba839a0e4a532ca580888e13fe8981411d2b487e9736d614cf

          SHA512

          5c86123fdfeea9b026db07b3c88c3d4ba5a76b7c23db2550fea096fedb5b2ff7ff0a2049280c7a4e36cf8405633dc64166dbb0364fedb8b17738fb8d258a4781

        • /data/data/uni.UNI8598589/cache/jsserver_start.log
          Filesize

          124B

          MD5

          09b239ddaf00e6b622cca6a6679a058e

          SHA1

          ce138f998f059cdb4b8027f10d20b17b008e23b2

          SHA256

          c4ebde63b8a2b13b524cf04e44318f9c36cf6a8fa76e2d87fe142b5e95f620e3

          SHA512

          3f89f33df994249110f63a72fc98827378e99967e9c57be969a00cbd3767f1af99cf6d8adcb32a3fcfeede57b3086bdd1229953f356da468d5b2e4e81ec85206

        • /data/data/uni.UNI8598589/cache/jsserver_start.log
          Filesize

          856B

          MD5

          11b8e36d86eb4a53f8dbe1d5aa8ba54a

          SHA1

          25bc20bf28fb45a5b54430f05d1b4e1ebdd01aa3

          SHA256

          263fbddc295e13b4be15d119e1465b2200a4ed8ff79f68583d2bafb92ab193eb

          SHA512

          0ea82a59ac5a19dc9e7ea67e85071c03c27708ce300a7a419ef9e74ec2f5499793cad925894608d13d0235723c7a4c6c3ad73e058040da5a4aeac4d2c1b3a64a

        • /data/data/uni.UNI8598589/cache/jsserver_start.log
          Filesize

          934B

          MD5

          aa1c157158bb2f78e55ece4017c206e6

          SHA1

          6803d4b30f51b1f1bbb56c2967bb426bb2189d6b

          SHA256

          ba9577cd5d15ece40965f2d165e82717366d8eee0fd389a6a3e5feffdc6c5d78

          SHA512

          90a5d9f6d3e5b1e2dab0ebd3424e470ac4c5d23fb96159ef3693a45deed94d384953e1a46ff01f8d2ed85a960878951e2b818bb8c20c633617c509b334a7ce80

        • /data/data/uni.UNI8598589/files/.DC4278477faeb9.txt
          Filesize

          32B

          MD5

          4f9dfacaa8819e74f1f0e265fe88f829

          SHA1

          1313235d86f4bf8639a216a764d21d0bc9fb1332

          SHA256

          4e5022cf663b6d243add9e5efd0c517671cb3aa46a82d5aff61333e7a1bd9d86

          SHA512

          35f7a092e68e5706f37d653daa794e93bdc6db9584f737427e25e9466d4271ed1c13337fade66a8014a4e62ccc42c624521c7f63020d9b282b9589b0e3ae37ad

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappchooselocation.js
          Filesize

          37KB

          MD5

          541b74a308cf145406f9bf4ad1fcb448

          SHA1

          43f3e2f9e4b70fe5189d551ecc1f16d8ac9fd138

          SHA256

          d02fdd667cde8112918fb883c265fa58fd04c9ca7fd2322be73219c6cb0b000c

          SHA512

          20cf116dc15b529f1f0120af35d51d7ecb5c8851796e1d11b6985ba0ee9a70a4eead4b187157a5c67253a3e0ce8c54d12764ff4748f1779bfd15a965a7828666

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniapperror.png
          Filesize

          5KB

          MD5

          4b85724c8336cf16e4259cd77839d078

          SHA1

          0077e1dfbd257fc6b953b46b6e0e2a9f67a0e167

          SHA256

          7f8be3263ad01b19844b6a5e6609ac81e2c3c1370c4abd6b7c6083645a038e19

          SHA512

          d766dcf9278a1f5fb02be2eb2f26cc0f08c772ad5bee4faf5ba17424eb0bfaed32b13e2688ae690d38216763698c0dfd91504c3ad2ff21b0810cafcda56c4560

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappes6.js
          Filesize

          51KB

          MD5

          14291ec63c2b20f07b350d41c0297f5e

          SHA1

          6c4d35af5d8af26a1a968db7e843143024718a20

          SHA256

          dee953e53bd2039a40f75e2bc911a777527e601795b3391bec771790aa75d6a9

          SHA512

          e5accdbecff89572796a45ae493d1fb2952a929a1bc2d38e119d2a7169d856f25598267aabdbe5a8f7dbb02c08491eca8df2186e5d968f7f3ef6c978e899e3e1

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappopenlocation.js
          Filesize

          27KB

          MD5

          3c1dc9d213de7258b4f8bbfb7831628e

          SHA1

          04b60c901b98d11a76432bdac8fb29d84f6bafb3

          SHA256

          826e66a8621e89023fd89fce6ec66ca0dfcec747aa7dc3d24f86a1181e2d244d

          SHA512

          b21b47e6687edf12821b26b8d871ecb0e326f41fe18a6c24d03bc361fd4a8e0c1f58ab53d2713b38da0249f48407da49a28be7cc969df4cf9996b206c415ce89

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniapppicker.js
          Filesize

          28KB

          MD5

          b6dc38f3d29246d6b4ddf0a871dafaf7

          SHA1

          a57aa511ed4af45d98be339dfe9a98de5832f078

          SHA256

          783f881c1a1c37750f4382f74bdf32818f5135f20e3b4a15b9006891a7cc8e6f

          SHA512

          a8c656d2f6caab3ce9fb58022c79afe2cd621e438e4c15afc6ef83988b6418dcbea058ffc3c3b722eac84d5605ae065f081907bffa8ed5c968ccf02ecc0d3973

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappquill.js
          Filesize

          211KB

          MD5

          d314613ad90308725611f16a8328db82

          SHA1

          500a8b141303864410fc7adc9b2458fbd969fabb

          SHA256

          8b8e7cc7346194e76061f93673a5c3c9765ea06b27fec0707156f4d81c2f4e24

          SHA512

          5763587454ca2d7ad2e933ce784423314ac8379bbfe83c7025e54d9a4a48b27e58f7a63fa58259f0b30c0b7a88ce42a446b1cffd8b89658251aa687ad9e18e02

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappquillimageresize.js
          Filesize

          23KB

          MD5

          0cd800647b3b6799424a3e218f1a0755

          SHA1

          2580e001a0b378437c24743afebea418c46d929a

          SHA256

          3a5a225ee38e2d4a545b2f8de72d5b8efa195a74359d6d17f534d5ecb18a7d6e

          SHA512

          aa8678f60ed303baf013d70e71a7a43dea6bb2082ce9073cc67c32ee90ae65bb9c55d0a03bf853aa1e1d98b0c5f61cfc867cb92c134d45f43211e8d0ee7ea0bd

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappscan.js
          Filesize

          19KB

          MD5

          132bb0dbe8a73b86ccc8638556321ebb

          SHA1

          468ff23bff2c2623b1dc1e3d176f6476e17c1499

          SHA256

          0aea8afdd177ce978747f2a25467c9a1aacef2407f67266399dd1d8206b06167

          SHA512

          160abbb89af318c16e5a11f7460315d0b39a1747034d0adb938ac3bfb9cee982d29fa53bfed9320871e13287ab9498674c31f58d2e506ea6e0044e970d4f7263

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappsuccess.png
          Filesize

          1KB

          MD5

          e1812c5e999af10160557521a4ffd557

          SHA1

          98345a98932f3fa62275d7f6c4422dafddd65b8b

          SHA256

          fbb49724e75bed2bf0ecbf45f01dbd093ee80bcff204826de3861fe52a727092

          SHA512

          d0b4432fa9409e3f8894079100a8b8491029edb474d285dcfb14b063b7776424b28f0d846c828fc50b0811dd99c02e9af500f3130010b356e3759c566894e9e3

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappview.html
          Filesize

          811B

          MD5

          ab82beb1c8665fdd2f21def36201bbff

          SHA1

          8e7d00582deebd068f1e3e6d642d4a6fa495f5b5

          SHA256

          ab393dd01c15a4b9f2d15173a06bb1f79b2ee67e34fefa950c6bdf7164c527b6

          SHA512

          8d6add016a2e29886486b4bc38991f9ede963f0f7b807b47559a5015cfdaa3faebde7997ef968622aaac6671039b71a8ee9950b2c388cf3673a4a6b84c74d1ed

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-config-service.js
          Filesize

          2KB

          MD5

          b1e832c6f5abbf9a30a023d6b1a1bca0

          SHA1

          b95fc8c54d92c6d9d57db59e4402bc5e852b3df8

          SHA256

          7a3563ea7a70d2720616158c45fb630d4e8458fd6de6036ec90ff82d7e7a07c2

          SHA512

          aca01a81fff6472dd5f0d2d4b41a5d4282adf2e6e9777865b457bf12c9d0680d3c86a17a665c85c9dc8784241f36e4c13a6b22d8f447b12939e3339f8aae352f

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-config.js
          Filesize

          1KB

          MD5

          c002b4467acda895a4e6568bf4105c75

          SHA1

          cbbf751edb55827115b9a7006f64b9fb76a97c52

          SHA256

          e5211ec4a530360ae7cb8679c61c154fac6ed9030a621e2db56fd9e2b130a4df

          SHA512

          bfaf77cdce436381ae8be61525360b6bf79b1d7f0fc00b153a2521457b3bff7d60adfd402edb4aac44fbe4e13916ea33ffcafaa42d1c4768b370210810a6c730

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-service.js
          Filesize

          6KB

          MD5

          2392d4b30747e308524230dee5cb705f

          SHA1

          92585926dff16567b4e933a07b37ede013aeaf03

          SHA256

          4899b6cc73150b74bd95be3239ea6b7781ce1ea61bda2f87d9f79c82aefa7f20

          SHA512

          8a8cb850d57520bc403d7e2369250316eb0064abdfbb0ebd232ec76775a5c7688894fb65befcaa0923aa2a2d53a60b70167f10d177f4888e8ccb96140524e906

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-view.js
          Filesize

          8KB

          MD5

          1ad5d283e62929319f79fac4599a3cf3

          SHA1

          732801027e3b90dd9baa27a2a8e6b9933de76385

          SHA256

          22f7e8b975a7be1b9f92cca8820a9a10100b04080d1214041b36d0d68229c3df

          SHA512

          20f55e0c342af7c02ccf8e50847b8a25075d27c4c6384a9253a346becfb715ec2a1c075350e26e1378dffe0f60cf7241db7340cc477b3c92e83483cffb279d05

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/manifest.json
          Filesize

          916B

          MD5

          1e23fb6fbbb90b3b852630ffc78be835

          SHA1

          8c2a83578a1ee65f0714e60852c8544bf7d5e5b6

          SHA256

          d567df2de6d3b962a7b6a8646f2c7785070b33571000f9a9e0e242c18b2b4d70

          SHA512

          77cfc30cd8825602119c081b4efb028a966c2c9c56c46d3a3df83006094d7c00fd9250affd32d48b4b9dd09b65894f9bdc49c65a214d57e136d4662c80ab06b8

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/static/logo.png
          Filesize

          3KB

          MD5

          457f704c8de0a8fa0064134423b9ed9c

          SHA1

          99b712a4df1a152b6d7ec6cbd0d7ddcd8d9c9248

          SHA256

          46719607502ebe256abff3ee000121c761708258187fb2bd6dac8443845ef32e

          SHA512

          067034064cc18049b6084642bef534ddb2206e2ff72ae692581eb1d7f365d6d44a6f1aa922a38f5228c8d15971786017699d8e9a51dcf5967e546c28f51dbb5f

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/view.css
          Filesize

          57KB

          MD5

          a5a3e26831d0644c0b8e04460daf8ab4

          SHA1

          7020aeff3f60b066e908ff28fb488a9946a17c39

          SHA256

          060297bf3a8e4f97b158caa078c60f4904665b783815d1487baa4ca183533fec

          SHA512

          0350cfa42ed35fed8d3d947f598194a6f1e0f8e238d6b4600c606d6c9344e7f1234f46d845f82b0853f7124c0382599267228c36a8f959c7d6273fa5a4f3c2f3

        • /data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/view.umd.min.js
          Filesize

          388KB

          MD5

          8da3ada7595756ea63e114b797d0f1fc

          SHA1

          d4c1c501b3be4335e776915e3dcc7b43040e8829

          SHA256

          b6c6fc57c4414fd4e0cea7f2800d08f8d88dfe905f28f35766e0df58573ed565

          SHA512

          2b26e0e2d7c9ed489def34b7d29e69961d0a3ce9cd16b08652e0e6c5fb7577bb37d14a1d6d7aa5c62a4c47dda933ffa3628bbb5c10a7394f60b5e5d554adc066

        • /data/data/uni.UNI8598589/files/cnc3ejE6/eje3cnc
          Filesize

          35B

          MD5

          762298b93820a5cd8b6d8ec469078f7f

          SHA1

          d5b02a2ff3b235cd2b61ceff53a1d88b8984477d

          SHA256

          dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db

          SHA512

          70f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e

        • /data/data/uni.UNI8598589/lib-main/dso_deps
          Filesize

          272B

          MD5

          cfe0781516f4716583cd4a818f4afac6

          SHA1

          2c30565c4d1c6b1037c4a7c0a99ae569c5096715

          SHA256

          cadf6004d1f5b630b3ddf1d9053ccdd402a19d15913b6dbec2bd65de47d234ac

          SHA512

          26a88c6e78cfcb41d21e124102533dab5e3ba37f3e0d124d3cc3fe9c66d02c20f193297b6494c216f175be2a83a8b609cd1c1f9b0df4356b0aef39f5b00eb5fa

        • /data/data/uni.UNI8598589/lib-main/dso_manifest
          Filesize

          5B

          MD5

          c06857e9ea338f3f3a24bb78f8fbdf6f

          SHA1

          c5a0a2529d2deb60fec041b4fbd722a2ebe31702

          SHA256

          957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

          SHA512

          29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

        • /data/data/uni.UNI8598589/lib-main/dso_state
          Filesize

          1B

          MD5

          93b885adfe0da089cdf634904fd59f71

          SHA1

          5ba93c9db0cff93f52b521d7420e43f6eda2784f

          SHA256

          6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

          SHA512

          b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

        • /data/data/uni.UNI8598589/lib-main/dso_state
          Filesize

          1B

          MD5

          55a54008ad1ba589aa210d2629c1df41

          SHA1

          bf8b4530d8d246dd74ac53a13471bba17941dff7

          SHA256

          4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

          SHA512

          7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339