Analysis

  • max time kernel
    14s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    05/06/2024, 07:31

General

  • Target
    com_rytong_airchina_v7.24.0.apk
  • Size 65.1MB
  • Sample240605-jctalsae37
  • SHA256 8de5358421a8241a0c3dd256f101e22b7bac9ac9c65d794f4f39bf7434cbfd33
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.rytong.airchina
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4563

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        9e8cb390b90752b0f7f7a15dd5a9bbb3

        • Path /data/data/com.rytong.airchina/files/9e8cb390b90752b0f7f7a15dd5a9bbb3
        • Size 128B
        • SHA256 13010e21fac3130f28f3089b069a47d248193560f429940769f96ec02646ceb4
        • MD5 SHA1 SHA512

        a9d5eeeb070d9c2f7797e79d35211bb4

        • Path /data/data/com.rytong.airchina/files/a9d5eeeb070d9c2f7797e79d35211bb4
        • Size 128B
        • SHA256 2193f6e800d6a32e1984dd2e6f34c398ed4b3e78439e9e6e65457dd2a8a4587a
        • MD5 SHA1 SHA512