Analysis
- max time kernel
14s - max time network
144s - platform
android_x64 - resource
android-x64-arm64-20240603-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system - submitted
05/06/2024, 07:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x86-arm-20240603-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x64-20240603-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
com_rytong_airchina_v7.24.0.apk
Resource
android-x64-arm64-20240603-en
1 signatures
150 seconds
General
- Target com_rytong_airchina_v7.24.0.apk
- Size 65.1MB
- Sample240605-jctalsae37
- SHA256 8de5358421a8241a0c3dd256f101e22b7bac9ac9c65d794f4f39bf7434cbfd33
- MD5 62973898651d7346a795d170be752027
- SHA1 84e1ead2189757e6b3df75bdaa471ce6175f69ad
- SHA512 fb7c518390eb6cd5d6937156f3600d6828ac4c06c3f6ef641064c9e965eeb0428085bf912ce6fd8d141359980559db3875ec916826131f482427ef6356565744
- SSDEEP 1572864:UXb8LCwKD/7E8LztTaM8INchlRecOsuo6TZ4:6oL7KD/7EKaLINcbRezsutZ4
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.rytong.airchina
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rytong.airchina/files/9e8cb390b90752b0f7f7a15dd5a9bbb3
- Size 128B
- SHA256 13010e21fac3130f28f3089b069a47d248193560f429940769f96ec02646ceb4
- MD5 41607320b013450602ee5972449ff00f
- SHA1 87b2bce867e4dfadf4368dbddda56239b9602334
- SHA512 f5d465785e25c74261cc37b03dcf2afa4bcd67424b461724e13e58494e45dc1b908f1e562b44b7b9248c935811858cdd9ee30659038b4794a8eaa38b3570238b
- MD5 SHA1 SHA512
- Path /data/data/com.rytong.airchina/files/a9d5eeeb070d9c2f7797e79d35211bb4
- Size 128B
- SHA256 2193f6e800d6a32e1984dd2e6f34c398ed4b3e78439e9e6e65457dd2a8a4587a
- MD5 7aa6a068472cdd932e755b695ea83d8b
- SHA1 2396d8944c0013bf5663aae9bfcd454d87ff8d58
- SHA512 b50103c7165c070f8dd4cbc14127f0359ff5768c64b1b056b6eccc469f1af267652ceda84ec81406b2f28e26437890fdea1e905fdef950093ea931005cd83674
- MD5 SHA1 SHA512