4f56ff8997dc4d1b89f33be5676cd06ada9590152cba07d6224efb73a98652fc

Analysis

max time kernel
11s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
04/06/2024, 00:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.apk
Size 4.2MB
Sample240604-as231sfe63
SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vivo.sdkplugin

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vivo.sdkplugin
1⤵
- Queries information about running processes on the device
PID:4219

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

unionuserinfo.db-journal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-journal
Size 512B
SHA256 56fdfbeb7aab896b86ccc9de7bf803514b31f0363c7b4c2983534451fca7126f
MD5 c4450ec3ed406acc3650b45480fcafd1
SHA1 b1471658f8071a4af4e9fc8ae7e9fa47336fb3d1
SHA512 b7927afbc772c4680a74d97e9ee3391a922c5401b7c56658f3dc2d08126525e88d698fa909663df4b3275c842b70cb1eaa283e2c38437638f3bd4fdb083e9ac6
MD5 SHA1 SHA512

Submit Download

unionuserinfo.db-wal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-wal
Size 28KB
SHA256 df12680bd54c09489f76769fd41b1452d3ab23367b7abd0fa9e2eb3556f8303a
MD5 6dd5e1fafefc6feb686742ed915f1d22
SHA1 a596ce13e48d5e6cc2854134137547dd6a3e0c10
SHA512 d16cffb13dcdbb45f9e0cd65b71ff61d0430797e967f3b5cba9beeae04186250e33f6549ac1934caf01a077a48796d6d61ebb671ba35b95a5104a4b111f953f1
SSDEEP 12:KSOzdTRmBEyPbP/1w9OwClEXgEspeOjUCC3IJeA4vYJOeFYyRmBEyPbP/LG3Xtv:KDzyGSP/1M1IoOnC3IoApcBGSP/e
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivo.crash

Path /data/data/com.vivo.sdkplugin/files/vivo.crash
Size 515B
SHA256 4a358f53964640de3258076340a804f2832cf1062a7578579a63c2ef1b013141
MD5 22f7c8c8b4da2ffec5f34c37ce21f306
SHA1 453e5011e65e0c55f5e8b72ad0b270c62e77df48
SHA512 b7a4acd9106597b79327a3812677d3ea5d9145c72a232ea5dd85f1ce3804eba514d941d5fe1c7aaf6d40e0c27060041a307290f64e2c513b51a098fc7b5e7c34
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-journal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-journal
Size 512B
SHA256 113dcd4e228250c162524a324d6c7921f28b0382ee7c1bbe1e5c618e186afef1
MD5 bf3009449fb897c6b1ed9fa31fec295c
SHA1 10ecfe4c45ec8d0b4128244c4c8e945d6357ff3d
SHA512 f8972eeee7d733c94f4e072352cd0986e1da3133cdc16ca7e8765022c9c26cbe14fb5d5f86d0180c7059556e6e2a01c11c6ca4aefe2028bbffa50d65ee7173b0
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-shm

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

sdkaccountinfo.db-wal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-wal
Size 28KB
SHA256 e6d3f3a885d076f0b3f602dcfcea50dd4b53f93d7c5167fe8b3fdaacd9a5889a
MD5 baffd78a5c828d4c75a6b6de8f80bbf6
SHA1 032ccad0bdd68ca293711a1fb4a6a797fa5de89f
SHA512 2d9ad9630e8c23882f16bbbd7ac7354b45f6f4307e8dba8541db77c82befb6a8310c72cfd97cdec7c6e7ad57e5cab7b31ddb7d79bc0b177add10c394e2778173
SSDEEP 24:K4ZPkzyGSP/64T+H0qgsHseE8YoxSFVGSP/69QKJ:gzNSP/Y0sMeE8GQSP/qQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

timestamp

Path /storage/emulated/0/.vivocrash/com.vivo.sdkplugin/timestamp
Size 82B
SHA256 d115cb16f6cab304711115476a7f6796471ac8eb3842a849f36b67fa55bf244b
MD5 83abef49ae0975e7a5fc34bcf39a1752
SHA1 4c37b316ed212f3c0f3cef1c2a7f29a116165a63
SHA512 c275f4784eb1c1a38a642fc6a9173778401fcf2c1d948d9465b313a3361c1c9f08354bde4b2dba1a2d88aa5c1cca0529487fd15d6541d273586377a53b8d6b66
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads