Analysis
-
max time kernel
132s -
max time network
168s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
23-05-2024 12:34
Static task
static1
Behavioral task
behavioral1
Sample
taimeng.apk
Resource
android-x86-arm-20240514-en
General
-
Target
taimeng.apk
-
Size
12.6MB
-
MD5
f7cd65c253fb7f8ef6984380d0c11e68
-
SHA1
8bad78638b10443a4a0ab0b317919361654a5312
-
SHA256
125ecd5f07d7071c35b050c1ae6ed0d76bb473d81d1aa46b921c00a6aaa30f4e
-
SHA512
26af31c5834539948ad3afe42b16d4e5cf2e68edf261aa867c4c38298921309fb0eff606b91699dec9b72f0e42bcd28d85faa9deb7ffad64af7fe8247e047534
-
SSDEEP
393216:zerLX1o4iy8h122Uc/xOU7/gLo0LHnzwpwkIwc:6rymqlrzmnH8pwl
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
uni.UNI0660DCAdescription ioc process File opened for read /proc/cpuinfo uni.UNI0660DCA -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
uni.UNI0660DCAdescription ioc process File opened for read /proc/meminfo uni.UNI0660DCA -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
uni.UNI0660DCAdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses uni.UNI0660DCA -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
uni.UNI0660DCAdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone uni.UNI0660DCA -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
uni.UNI0660DCAdescription ioc process Framework service call android.app.IActivityManager.registerReceiver uni.UNI0660DCA -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
uni.UNI0660DCAdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo uni.UNI0660DCA -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
uni.UNI0660DCAdescription ioc process Framework API call javax.crypto.Cipher.doFinal uni.UNI0660DCA
Processes
-
uni.UNI0660DCA1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4264 -
/system/bin/ndk_translation_program_runner_binfmt_misc /data/app/uni.UNI0660DCA-uY2kp4l_hLTuRe5YcQWy2w==/lib/arm//libweexjsb.so uni.UNI0660DCA:jse 55 56 1 /data/user/0/uni.UNI0660DCA/app_crash/crash_dump.log2⤵PID:4304
-
-
stat -c "%x" /data/data2⤵PID:4398
-
-
/system/bin/ndk_translation_program_runner_binfmt_misc /data/app/uni.UNI0660DCA-uY2kp4l_hLTuRe5YcQWy2w==/lib/arm//libweexjsb.so uni.UNI0660DCA:jse 55 56 1 /data/user/0/uni.UNI0660DCA/app_crash/crash_dump.log2⤵PID:4435
-
-
stat -c "%x" /data/data2⤵PID:4571
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD57628e2d9516f46d07f47636f323b1186
SHA11cc64d0e9b4ae930ed8d46904b01f99feb6e09cf
SHA25613f588ee6494cc79d11c1ad39c50689d228bd054ed1da52f084b0feb708e14a0
SHA512f56bfbc93b119ab9aa656af00757c2d46afb01234b91644d6b020bc2ccf3ae68f88e6df8757963f8af8c29325364b97252fcc27debca20cce88eec2adbab4eea
-
Filesize
32B
MD5eaf2bb6e56c1941cc4af3613d3cbe8dd
SHA1fc65601ed32755e38db893e82db49a37c0ea0bd7
SHA25640d60b35b5f088dab6ecddfe7d85ec6ed5b4379c6d3eaade739b13d423873b7a
SHA51295ebecab8f5745f29fe451519f8aa4f74a0a0411f617acf6909d2f9773bdaf22b2b922bb22bba75eb208a50dfdef358c239897c8484a7323a758fd4d6b8fffd1
-
Filesize
37KB
MD5541b74a308cf145406f9bf4ad1fcb448
SHA143f3e2f9e4b70fe5189d551ecc1f16d8ac9fd138
SHA256d02fdd667cde8112918fb883c265fa58fd04c9ca7fd2322be73219c6cb0b000c
SHA51220cf116dc15b529f1f0120af35d51d7ecb5c8851796e1d11b6985ba0ee9a70a4eead4b187157a5c67253a3e0ce8c54d12764ff4748f1779bfd15a965a7828666
-
Filesize
5KB
MD54b85724c8336cf16e4259cd77839d078
SHA10077e1dfbd257fc6b953b46b6e0e2a9f67a0e167
SHA2567f8be3263ad01b19844b6a5e6609ac81e2c3c1370c4abd6b7c6083645a038e19
SHA512d766dcf9278a1f5fb02be2eb2f26cc0f08c772ad5bee4faf5ba17424eb0bfaed32b13e2688ae690d38216763698c0dfd91504c3ad2ff21b0810cafcda56c4560
-
Filesize
51KB
MD514291ec63c2b20f07b350d41c0297f5e
SHA16c4d35af5d8af26a1a968db7e843143024718a20
SHA256dee953e53bd2039a40f75e2bc911a777527e601795b3391bec771790aa75d6a9
SHA512e5accdbecff89572796a45ae493d1fb2952a929a1bc2d38e119d2a7169d856f25598267aabdbe5a8f7dbb02c08491eca8df2186e5d968f7f3ef6c978e899e3e1
-
Filesize
27KB
MD5cc8f20d3d2d028411b9b152a6b346acf
SHA19c95d6657fb65d24b744671a8273bb40d87cd1b0
SHA256faddc7d3c196adb49447da3961cc08d9e9e134a19792b05918cf0bb6148c3c4a
SHA5129ac6bdcc9b46a036ec102756551e1a13126a4273a994c63c6ed1e5ac27ed32eeaed600c25a17e7a6ee56bde941f43d9e14e3ccdf0995366818434167a57bb99c
-
Filesize
28KB
MD58b1bd795ef3983bd2c703a721f6c7e1b
SHA1cf5255beee7b6941db180969c176f89e66bed4ae
SHA256db7349b013f060e5500154d19f80972aee5e03af952dd4f8eaaf06ac74de0025
SHA51234d14c86e9648ee381954f6f774b2801027f970e07f46522ea5c5223a2f3b4c7fdd98230d5e020f80a9f7a1a00895c43aa69100079e000a5f1b8cfb5b9fcac2d
-
Filesize
211KB
MD5d314613ad90308725611f16a8328db82
SHA1500a8b141303864410fc7adc9b2458fbd969fabb
SHA2568b8e7cc7346194e76061f93673a5c3c9765ea06b27fec0707156f4d81c2f4e24
SHA5125763587454ca2d7ad2e933ce784423314ac8379bbfe83c7025e54d9a4a48b27e58f7a63fa58259f0b30c0b7a88ce42a446b1cffd8b89658251aa687ad9e18e02
-
Filesize
23KB
MD50cd800647b3b6799424a3e218f1a0755
SHA12580e001a0b378437c24743afebea418c46d929a
SHA2563a5a225ee38e2d4a545b2f8de72d5b8efa195a74359d6d17f534d5ecb18a7d6e
SHA512aa8678f60ed303baf013d70e71a7a43dea6bb2082ce9073cc67c32ee90ae65bb9c55d0a03bf853aa1e1d98b0c5f61cfc867cb92c134d45f43211e8d0ee7ea0bd
-
Filesize
19KB
MD59809091b2d4c59397cbcd33d88a2b09e
SHA15f847d7618c5ad2052a75f1f694f335d56a62678
SHA2568aace6da2bac69687fba7ecb71b00245fcb2c4880fd57e81a1abe73539474b2d
SHA512b99854f3ba4b28f24fc8c30eb1f930503149c9115517500493891c6e5dfddb6dbba919df62b14a3661487dd83b2780f2dede5f9b3a4430dc3f51b0a1c51536ce
-
Filesize
1KB
MD5e1812c5e999af10160557521a4ffd557
SHA198345a98932f3fa62275d7f6c4422dafddd65b8b
SHA256fbb49724e75bed2bf0ecbf45f01dbd093ee80bcff204826de3861fe52a727092
SHA512d0b4432fa9409e3f8894079100a8b8491029edb474d285dcfb14b063b7776424b28f0d846c828fc50b0811dd99c02e9af500f3130010b356e3759c566894e9e3
-
Filesize
811B
MD5ab82beb1c8665fdd2f21def36201bbff
SHA18e7d00582deebd068f1e3e6d642d4a6fa495f5b5
SHA256ab393dd01c15a4b9f2d15173a06bb1f79b2ee67e34fefa950c6bdf7164c527b6
SHA5128d6add016a2e29886486b4bc38991f9ede963f0f7b807b47559a5015cfdaa3faebde7997ef968622aaac6671039b71a8ee9950b2c388cf3673a4a6b84c74d1ed
-
Filesize
2KB
MD5556025bb44490e942a948a3526ecc3f8
SHA12fe34bc4234c21fec270064044ff5e57c43aac7d
SHA2567f81af0cf3ab98af92e7eed4ca97809b7d519e6a5602596ff9fe836f9fc365b8
SHA5124adc2b93a765a0c4d4cd12bed6fba8d71fa3ab2fa793264b3ef416da41f489230568f948bc657aed856af7bb050de92adf56309f59c37c906a19a8264b3e88dd
-
Filesize
1KB
MD5c002b4467acda895a4e6568bf4105c75
SHA1cbbf751edb55827115b9a7006f64b9fb76a97c52
SHA256e5211ec4a530360ae7cb8679c61c154fac6ed9030a621e2db56fd9e2b130a4df
SHA512bfaf77cdce436381ae8be61525360b6bf79b1d7f0fc00b153a2521457b3bff7d60adfd402edb4aac44fbe4e13916ea33ffcafaa42d1c4768b370210810a6c730
-
Filesize
526KB
MD5dc330c3f5a139e7f412cb52cd217f495
SHA11e253323d7ff20ec087ae05c2407f4324c588765
SHA2564b8166b69fea44357812c1c7be22601b4402c84d0506b6c57b9184a617a94540
SHA5126deb6ac759be57c384d3e7d82fd23e9abbcd52bd9851f006a3141b44ec8aec885d46bb65483a79a8dfb8806a40b5a583454c9c29674b222567e4bb79b67e5039
-
Filesize
377KB
MD506f4dd4978cdadfc087626757002d3d3
SHA1f666d44278af0d2960afdb0ea979a227da4287ed
SHA2562612d29b09f59a5574294f86d16157dec8f58e10c136c466d36a3c5b57337cea
SHA512c80d9f6b8c246fb1417d72768bca7bd6904287bdff1bba2313d297f848b1d8f7e8ba93443b525236e13bf04744162e55d1849a821371e8ddd51f614b60644d8c
-
Filesize
905B
MD5f9b2fac7d04ae2d2d2dcb1a89cc0d901
SHA12563c987883829a4e27572f1455f87451e18ad9d
SHA25633ddba3e70525c23aac063c1921edb3745908fd514bc59b066d06c901382fd07
SHA512d5903b8723f1e77cdfd8785c18d615bd581aed95263996ba9c5120fd061a276432bc7651e6e81451a7b3cca52179e9471e3876a963f5fd25b3aad634c5eefcb8
-
Filesize
3KB
MD5457f704c8de0a8fa0064134423b9ed9c
SHA199b712a4df1a152b6d7ec6cbd0d7ddcd8d9c9248
SHA25646719607502ebe256abff3ee000121c761708258187fb2bd6dac8443845ef32e
SHA512067034064cc18049b6084642bef534ddb2206e2ff72ae692581eb1d7f365d6d44a6f1aa922a38f5228c8d15971786017699d8e9a51dcf5967e546c28f51dbb5f
-
Filesize
265KB
MD5a7d7991e348e5607031102de313b0536
SHA1f779c2c414c10e306700385b30d17106937c1dc0
SHA2566e4f3026c99ce12e23c0fae6f19dcf07b317226a1ed968038872fbdda0ac4c5d
SHA51231f442c57d74d10f83804502a70edac7fd2251891c6495254debdb5c49e074f2b2bed543babc508f60fd9acf76f87dc274916569f97949208812582b18d9ed11
-
Filesize
29KB
MD5710baa716d37d75c9ca451f7a03fd2ff
SHA1781cfd11cd9832ec5bc807c2fc540d769683fc1a
SHA2566f01595c3cb29eb93a8722071755e00be3ca3c45abd4b20ab335c50e257eab0b
SHA512ae418d574813d60a079f5f9bf745cd2141cf7ada3100fba3b4d35e7eeb1650dec378eb22d8c46be68a018e70b128192f658aff0c3d12e8813c8edd3b524f14e2
-
Filesize
43KB
MD595bb83f02f5a32efefc22f893eeecff0
SHA10973a4c98bb1539539c8a999463ce050a8e045e8
SHA25662be3112cc2860adf6992a3693ecff919751b9a1e6c78c72faa2959e685b1291
SHA512eab56225c9a7f7a67a11b96dfbb5fc3240a872d1cab5567e4aa884b6fe703aeea38d2b43e9dceff3cb73ec19471d71e0cc90b61fe0fdf631f5e7f893217bde57
-
Filesize
304KB
MD549458d0cea8ca4d6f27509cef660697a
SHA1511623e0f20b0dc62eba1204c18546832758f582
SHA25647ebe93104cdbb0763f3ae49f2b5dc7bf7e342e4f7203056b2d1ef69b6cc8df4
SHA512ec065175360e5085d5f170472cb2d936236ef4b404e33c09caeac902b1930eea3c94cdcbac992e43d5104dcde1dddfb6dac8ccf15847a305942870459ae92990
-
Filesize
512KB
MD597c72548d2333640a2375da74c4a1e7b
SHA17532e276270c9cd6996b6126c7f73161859a1cfc
SHA2569b583e048c0d2272695eae3e3b4d15f89270da95996e6ebb3f7c8b7a86896635
SHA512109b6c919dfc12233d6ddec4028bc802b37f7c59e1bca73ce2ebc6f28f83bd25d66e15af77fb9c60b36595852270b66d6fe330c9645a1f8e54b451c3b852a782
-
Filesize
403KB
MD57257e136fa6430d027cd0efe8bb44c91
SHA15b7026b9bbfbecfcfed7eaadeb3182c29b4a5910
SHA256776e6165025c2b261e5d52e4e2dae86d5cea9a89a27e3e0d1953bc58d68c0c75
SHA5128f98c404287222f6ecb9cba1d7fb502f47e2694430c8dfdb076af079ea9548f73e2690344075454c29f1efe3531ca61c32858246bf8134f5b1b5c6276616a662
-
Filesize
42KB
MD578550a91b4aa585bbf9f42f66ad39173
SHA1f3ad8d14169f7779383a0ada6c2ff88e053b0648
SHA256645f73513e2905c155735fb045459ba22f0adb57fb9ffbfd6fa9d221202e5550
SHA5126b995ee1c4b18b67ba0e7dfcec8f487e3569516b61bf42aa13ff707a8e6239a01a9681aa2d6956d6f8db9bcaf259e20556ae5ed76410bb24fd5fe62f6ad91e70
-
/data/data/uni.UNI0660DCA/files/apps/__UNI__0660DCA/www/uni_modules/uni-icons/components/uni-icons/uniicons.ttf
Filesize34KB
MD5b6d3756ee0e3dd7ecb155b751a233247
SHA14e61eda60483fc01548f76ca5741ee838486cc96
SHA25689ed7d6d732e893a473c6d6b443f854f4dcdf57360a11016306335a2048895ff
SHA5120dca69f143ce0b6428348a23a9030ae49ae1936d940e28c75b766f89ec3fff44df111e435c300ffab7dac14d3f6b39fef8d8babb490b755c2ed5ec1b3f602cd4
-
Filesize
55KB
MD51b8a01993ae0b34ebf1945d6c79fd050
SHA1fd0e8a1b13c1eb3adb6488840789dedc6495465e
SHA256f007a21243b4866c2ab16b9c0209d36ed759f703e1fc4955bb7414d912d2a662
SHA512ccf6b36fa7c23d9a148c5e152959de8ad68801bfaaff495e30021161c7602148332873335c2ce497ab6a06993f5adcac5e8bbee4c91fdb18e149cc37bf9809d0
-
Filesize
383KB
MD59830fac22c354bae2ed199d86f71f9c3
SHA18ceff19bb2986966d5c9fcbabf0ef7b5f7aa146d
SHA256bcb8d2a3594b8086ac8ee139151cac07b1b974008d5f51124ca5ae5c62c6a281
SHA51278a616c5c725372a339e2e6f217124b4f78ca8f381a5017e54d2bace6936738b3fd978a50447eba3f330060a37c74440ce6d6fbfc5ffbbefd505396856ea6b2c
-
Filesize
35B
MD5762298b93820a5cd8b6d8ec469078f7f
SHA1d5b02a2ff3b235cd2b61ceff53a1d88b8984477d
SHA256dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db
SHA51270f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e
-
Filesize
272B
MD51ad3d70cb4d56c2de332ed6ee5a9674a
SHA13351985aa20a5bf953f7215cb518ce4929c65d53
SHA256b609fb3fd83ee0bc7175cfca6b3015c46b7deee1b9d1ae14b4ae6511761fe78e
SHA512f3100f1749d35a305e6be4f3a85227becdd2f871fc403128165e99711cfe2fe965b9c2f8cfd33954b77d26800794edb2e1b9c6a6dc5a30d33007716e8f0d2022
-
Filesize
5B
MD5c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA51229f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
-
Filesize
1B
MD593b885adfe0da089cdf634904fd59f71
SHA15ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA2566e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
-
Filesize
1B
MD555a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339