5c47fe9b6834bfd013e68ca71d68ed92d2d53ebedf87f201440f00b7635ff90b

Analysis

max time kernel
12s
max time network
157s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13/06/2024, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.apk
Size 4.2MB
Sample240613-agb3fswfpf
SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.vivo.sdkplugin

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vivo.sdkplugin
1⤵
- Queries information about running processes on the device
PID:4266

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

unionuserinfo.db-journal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-journal
Size 512B
SHA256 251e5ddf1b1fdabbbcdd7578b3c1bcab9b26f9192f7b8bfc41c425f45525645d
MD5 40fa430aafcca804010f46859d036229
SHA1 1c7c50d71ce405a4473ec86e5f6129ffbfab5c8c
SHA512 5783850603a2a17227fc54d153ec88c36db97c43538517ba6f921ddb6eba167e14fbb66588d9cb393bc6fc6a24766a870bc824fff30291e6bb10d25a839ba76f
MD5 SHA1 SHA512

Submit Download

unionuserinfo.db-wal

Path /data/data/com.vivo.sdkplugin/databases/unionuserinfo.db-wal
Size 28KB
SHA256 7c7c0c5c25fb0e2fcf6ba8dec35a672898972ef2085e577791a648f02e395f33
MD5 f5aa27a0d8c6a0750c0740d679e4db6b
SHA1 6687999433f5daaf279205b59c5108360fcb6cf5
SHA512 efce22feb5e9648695bafb8af13ae2ad60da0585ffef036b10d7867378fe8826c9596714972690fc1bf55d9902e5230a1d4ab8a6c7b71e7a6e3c22c0a786813d
SSDEEP 24:KwsgzyGSP/Y/2buOwXIoOnC3IoApcBGSP/F:agzNSP/Y/zXXIoOnCaSP/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivo.crash

Path /data/data/com.vivo.sdkplugin/files/vivo.crash
Size 515B
SHA256 6f0bdd640044ca38b0cd0027755a2cdd590fa423c0b69d6ba09213baa54b6aed
MD5 84d09ee14ea1fc8730c56eeec149c4d6
SHA1 3963c1a7e48008d04469788a83640cd5eee36ac2
SHA512 43c8b98e8c6a30e7f42f0deb52a04ae80a7647957126768c41a43ede49204fbfd789081ea2178176ab734bf7ecbb79f2ff770dc41645b46cdb90b0f4574d5ada
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-journal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-journal
Size 512B
SHA256 8c7827481d726ca45968795ed77f99f5d7667c4e98e483aed681b1d69f1be7fc
MD5 fe277251bb976410858712760b9c23cf
SHA1 dfbd540aaa81b4153e51f2b7e818df3f47fe8bba
SHA512 e811fc4a25cbf1eae037d4e16f80c04bd92436eace2c9396653e962b5f2fe73f06e3397cb0856959c0fc3a1ad732aa68f57b9d12f08d048d45df64348007a4d6
MD5 SHA1 SHA512

Submit Download

sdkaccountinfo.db-shm

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

sdkaccountinfo.db-wal

Path /storage/emulated/0/.vivoAccountsdk/sdkaccountinfo.db-wal
Size 28KB
SHA256 2ed4c0a398eb7638388a9735c92c25cdf4207b0eefdd88cfd1fc07ee1d9c33d0
MD5 193d54dbd8cef5a9aaddccc559359be4
SHA1 80acc4ffaf59a31eaa06a04ddfbb37aaaf3cbcd9
SHA512 b757f04208da537dcd7fc51a06cd493391f255f60f74f437b9fc80f12c6c3b798e85369f9269c9ee31071c2eb98411158d2ea854f1eadece2ac762c86ebf110a
SSDEEP 24:KORyzyGSP/iNVUAvGsHseE8YoxSFVGSP/:zyzNSP/KVUtsMeE8GQSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

timestamp

Path /storage/emulated/0/.vivocrash/com.vivo.sdkplugin/timestamp
Size 82B
SHA256 d115cb16f6cab304711115476a7f6796471ac8eb3842a849f36b67fa55bf244b
MD5 83abef49ae0975e7a5fc34bcf39a1752
SHA1 4c37b316ed212f3c0f3cef1c2a7f29a116165a63
SHA512 c275f4784eb1c1a38a642fc6a9173778401fcf2c1d948d9465b313a3361c1c9f08354bde4b2dba1a2d88aa5c1cca0529487fd15d6541d273586377a53b8d6b66
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads