Analysis
- max time kernel
14s - max time network
170s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
05/06/2024, 07:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x86-arm-20240603-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x64-20240603-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x64-arm64-20240603-en
1 signatures
150 seconds
General
- Target com_rytong_airchina_v7.24.0.apk
- Size 65.1MB
- Sample240605-jctalsae37
- SHA256 8de5358421a8241a0c3dd256f101e22b7bac9ac9c65d794f4f39bf7434cbfd33
- MD5 62973898651d7346a795d170be752027
- SHA1 84e1ead2189757e6b3df75bdaa471ce6175f69ad
- SHA512 fb7c518390eb6cd5d6937156f3600d6828ac4c06c3f6ef641064c9e965eeb0428085bf912ce6fd8d141359980559db3875ec916826131f482427ef6356565744
- SSDEEP 1572864:UXb8LCwKD/7E8LztTaM8INchlRecOsuo6TZ4:6oL7KD/7EKaLINcbRezsutZ4
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.rytong.airchina
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rytong.airchina/files/64975cc11264e8b781614c545cbc63a3
- Size 128B
- SHA256 5854ca6af1f0925f4fc54e4bdb4b45ef306a84b5a71e96a35a620f86ea89bb46
- MD5 28c3a5da2f0779f30bad681cb55891f0
- SHA1 08057b99200979f63f8f47de622a847efaa38dbe
- SHA512 12b3aa4a647ef6a7ab04983c4504e57d937a6a4c6b60b383d8fa8226be272f9c858c2a9f75fce36adc4545bfc01114161b2358de4a7a6f48e3a084b7b10b0e6d
- MD5 SHA1 SHA512
- Path /data/data/com.rytong.airchina/files/989e3ad2f7b1516229cccb071e679054
- Size 128B
- SHA256 e56064b5db3fdd1deb265ebb7b1339b96f3530a5713ba167f8dbd4168622ec3b
- MD5 688d5d39bd0a7cd0035d829c032cc0b5
- SHA1 479547d5b06649fae59a960470ce49814014f0ef
- SHA512 d94de839fd48ac56bd570e05247f0a3fa458ed0c5238499572439d8789fd6e4f5b33aa391fcc6fff70b11e939ef990c642c583919c7d67d54df17fb6d93bffd9
- MD5 SHA1 SHA512