129c9b94fa233ed3d4d359b076315254351143776cadd7674d398fbe3f9b690f

Analysis

max time kernel
11s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
04/06/2024, 20:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.apk
Size 4.2MB
Sample240604-y7wfsaba88
SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vivo.sdkplugin

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vivo.sdkplugin
1⤵
- Queries information about running processes on the device
PID:4223

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

unionuserinfo.db-journal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-journal
Size 512B
SHA256 7e2dd4efc63c96e5c1a308dd207e32be2113919ed1939e7c5f5d59af286da367
MD5 c6d4e151884acbc3883618b59cc7fbc6
SHA1 612558d080f75cf00b5cec7e13d5c87af6a72385
SHA512 287b495540d549d1607ec26edd9b760932afce264e6b232c0ede301b60eb7e401eb99a6bedcf6a6aea0cdda8eadd361abc9d5b28e72f6b8ba8bdc18cd3e4ccba
MD5 SHA1 SHA512

Submit Download

unionuserinfo.db-wal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-wal
Size 28KB
SHA256 01cb8cf40b3dac74b7428044770df7a78341de1444da0ab3a8770e96110c81c0
MD5 82e28e940f9f0744e685209cfb08b777
SHA1 5a74bf0ba21c9af688f4cf00830ad69782987ada
SHA512 fe466fce9e6b77442b7973764ef5eca5eb3084a81a9a050d97aee6ca035c5fb2d9d89cf9afeaea1c7ee6367fbc3a66b58072abd4e6936ddb527c6c5cf612d346
SSDEEP 12:KA5zdTRmBEyPbP/lmdOwClzQ8gEspeOjUCC3IJeA4vYJOeFYyRmBEyPbP/ucAK:KA5zyGSP/MmIoOnC3IoApcBGSP/e
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivo.crash

Path /data/data/com.vivo.sdkplugin/files/vivo.crash
Size 515B
SHA256 6b50a91baa36c798163e05b91eb7da1be1fdfa64463a919604957343a714f54c
MD5 38b2ed03a06154617909cb06a83b4023
SHA1 b260ad6be742ecc318c22cd83860e8f87dc5073f
SHA512 fdd4b960da11191054bd795a0185dfcf3343e718cf9ed4a11173da2e5b21ff441a533127110b4ce0bbdda4c4275d97f1fdaab4deaf17cceaa8626666a557e8f4
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-journal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-journal
Size 512B
SHA256 6d406b53f9e3852fdcb49916ec8063e12df8ea3038149df2ba08cc7aab09868b
MD5 671fd65d3fb0a7e38b7dcd4ee667e806
SHA1 ddc17ac53168abe5e318f4872061a78ea129f598
SHA512 1d3486e85e742f20dc5d9d29d3f6944cf4784cc33102dbfa8800cb1b16718edb556c1510ce49664b2838ab5d7ce0043de6c4a32d4f0b2a7f7828c266051f9c09
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-shm

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

sdkaccountinfo.db-wal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-wal
Size 28KB
SHA256 7da3d599acf64810bf2952a3c83b345eb8113b63c5b48d9c96daa483cc14a52b
MD5 f7db0159ccedc06131bc4efe5caf09a3
SHA1 88063df06c65a7cbd8ab45a15fdedb50309ece28
SHA512 7de1a283bdff852bc9a607a5685c41aee44a64fae79e340de7dc42ac1ce322dcb9df579444b685b53c5146012ae0a36108854eb539560bd11ee08fbc80cf085a
SSDEEP 24:KYljk6LTzyGSP/Yfdio4sHseE8YoxSFVGSP/YoE:TLnzNSP/Yfdp4sMeE8GQSP/Yo
MD5 SHA1 SHA512 SSDEEP

Submit Download

timestamp

Path /storage/emulated/0/.vivocrash/com.vivo.sdkplugin/timestamp
Size 82B
SHA256 d115cb16f6cab304711115476a7f6796471ac8eb3842a849f36b67fa55bf244b
MD5 83abef49ae0975e7a5fc34bcf39a1752
SHA1 4c37b316ed212f3c0f3cef1c2a7f29a116165a63
SHA512 c275f4784eb1c1a38a642fc6a9173778401fcf2c1d948d9465b313a3361c1c9f08354bde4b2dba1a2d88aa5c1cca0529487fd15d6541d273586377a53b8d6b66
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads