Analysis

  • max time kernel
    170s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    16/06/2024, 23:43

General

  • Target

    763.apk

  • Size

    1.7MB

  • MD5

    772c92fcb8c3e2cea804b30d9fa62f46

  • SHA1

    7e4d1f0930ad1501291c48e46548f738f586af87

  • SHA256

    e54d9a6e8283faa78c280c5402184e1a8a946f21c94addf7207ea28106acb357

  • SHA512

    449ce40f29ba1e762e9dca388ed069fd58824f38312801994a4ecef598a20b79a5d32aee3457b1adb2c508a42dcf63112a9b762974938ae24d4fc6cb71819739

  • SSDEEP

    24576:e1WF31lj+6o7zYIdD1X+9lviaIhvcVIWaVMO8afflG7D0HS0c1A/zbNIgqta9JrL:o0c7z/DU9lv3IhvO5tGNGMjcy9I7wj

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.tencent.qlauncher.theme763
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4198
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4428
      • /system/bin/cat /proc/cpuinfo
        2⤵
        • Checks CPU information
        PID:4447
      • /system/bin/cat /proc/cpuinfo
        2⤵
        • Checks CPU information
        PID:4466
      • /system/bin/sh -c getprop ro.build.fingerprint
        2⤵
          PID:4484
        • getprop ro.build.fingerprint
          2⤵
            PID:4484

        Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          40KB

          MD5

          ab80ef7491624bc62f79fcda9feff943

          SHA1

          49bbe355e914a048701882da64871473e800ad43

          SHA256

          ff42b55b6ec01939a1bd7055f56e9278052ccc588b08b43b2057861c4a71ace4

          SHA512

          6d345aa99e5742832aa495181a4dbef90aa1ed30698e802b53f0d400d7593a5cb13ba863b341445dc65339db5792dcdae494c1041e215240bbba80c204aaf7e5

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          20KB

          MD5

          d05267d376450865f922caedaf5d4cfd

          SHA1

          99e65704b4b3eea5f4acd760ea75b0370048f8e0

          SHA256

          a22a0fa4e07f1c81389b62e7cbb0b7853c128f274a6ca9841035f6ec4ec75167

          SHA512

          4eb5331885daca4048708a6d75e2f4912c1e4e1e975c5f64f2d97c3f4da9c29c5affc335d180031b94f644403107e2d9eac34a47f607f83c705e989dda1a3a20

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          20KB

          MD5

          2dc35a4ee27225990c5d48b49c2d5418

          SHA1

          841da6f4e10fedfc6c2a18fa98e57620a0873669

          SHA256

          75cd23d5bae5cd87a0d4ab170d00afc4bd1a167023268e8d125598f21c28f81c

          SHA512

          a48b8016f0f7b47e42e136c3f8138bdfcf24d06eb556968cd3cb761141b6b5b39abca99bba7248086c47ef137e215e686226cb6891fecef7b6cad2125bf3efaa

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          20KB

          MD5

          eecc7b8c0894a12cfdd60d3906254c0d

          SHA1

          72d2e0f1c6fb16abd605382276d14f2d36f16f6e

          SHA256

          f78d440c4be37749da39fcc5ca750c37ea759bcf497d95b9db42f1aa6f6ad864

          SHA512

          50fe5bb70b57cf6a5cb27ca9f6db07cc0d0ea67f626d21890434b225de59ee4b5165d9d8710867e994415d8eb85fa3da0c3f55db5d2dca0757268a920751a710

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          20KB

          MD5

          33f567b50559eb266d3b2f782fa5384d

          SHA1

          84432abe935ec93230402dd8b7844917e1694967

          SHA256

          07d0428b813a62fdb391742382358a7c7d1fd38c204f68e11154d85b72948bdd

          SHA512

          54bded4545ace11af6bfbf58f8a44865226ca525ffee1ecaca90ed794a661c5e32cea0781b4b28823aa7ea66134a8b903dbcc871d3a21618bad647fe440e922b

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db

          Filesize

          20KB

          MD5

          5b5e7d48c164a0d4699edc90084d67fd

          SHA1

          7a990a56529d6811be7786f0c2872759b6ccf292

          SHA256

          8e35c408b58807fd1ed4fce0f36d8f64f27ed8de5ca37f57d371e80b8d3dec2e

          SHA512

          a160012a1b3586f921bef44c7dfd5909b8a83854dd3250a73e6457024ae85ab5818ce5665435f642da6f0d6d384649fa87bfd442b8975e8f0dfbd99709b2b58e

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-journal

          Filesize

          512B

          MD5

          7aabfdc6360dc148395c13e0335032ed

          SHA1

          513b6fd00412d5c3ce84dec99cfee88e37f9ba5d

          SHA256

          36a2432da7168d642d497229c7cbc045b6143d3f40a4344c88a5d15cb3df72b6

          SHA512

          2183204aaec72da3a3f8e854a214e3fb159e0a546870db38b379c3309c0ac1dc53184848fd934f9ba0e6f137e43d2f607e3f9b4923426ff25cdb3adf8151fe07

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          52KB

          MD5

          2681641b65633e40794f80a236e54929

          SHA1

          b8d39a6369213b69a729e373a0cfbe67b5c654e0

          SHA256

          b3037390a5c4a652fa6a5cc9dca613819e76902fa98c99df09a5a43d9b50bbb2

          SHA512

          f547ee0f8e1f4797acd85ec9f299b656b44cb131b75dea7401634d3ebdc33e9cc3e758af39ec5f2776304e1e30bc550729cc73c5b64af11059fd4e39cd9bb55f

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          16KB

          MD5

          df1da9922f467a757a594727cd3b1c41

          SHA1

          0909e808ed402eb4e36f34d456838c9c84165e92

          SHA256

          5456622d427a926fb525b79ed5733a81c772b0b3671422284b16cea1d2e891ca

          SHA512

          a1bac120e6507061b03fc27a5e60023bb280af3d2777d1b27209485387f874359301cec067b4f5341c2adbdc0d67f67e8c9a74e4fb10fb20b6b6acd7434c48cc

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          16KB

          MD5

          79c4ca785bedd7416167025e0c5c45d4

          SHA1

          07fefbfdfa98b04975eee6ed4d618265dc2704fa

          SHA256

          a9d90cb593046761fd256f8e2b5483132f9cbdd7a1e0ec1ab95ff4aa9261eafb

          SHA512

          9da216ad6679b7681884638ad00730d7b0604178e12e923be5bf9cf7907c168f0f6e08b5c39e9002219be8b310c93e3c69077240b94bcf356f7267a19aeb26a5

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          8KB

          MD5

          1f41967a6564c117d7a736beb9d1b86a

          SHA1

          3ed79b8a694311ac5ca2e1ee13c4fa54309008a2

          SHA256

          9b6d9d35290da9c153fac3a410bb4fc27f45fd328186a1304071ac7f3b0142c7

          SHA512

          20cf99e27019f345d66408f1c2d8e956a72762a6fccd24a8514a40c3aaf4c9f1081257eda2dd97f6a5f1523908c02404a4a20382bfd0bd035c0ad003206fc93d

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          12KB

          MD5

          4e509c2e05b32ac7167ca8b27933db58

          SHA1

          c1efcff1a7e8a22347d295d612e7e9640fc10494

          SHA256

          33d72760f0ddc09818c280a7cc2be9738a215c039d0d2e874e4d13397db96d2d

          SHA512

          1ca861de34b701844bcaf057756edcffbc188c20f2bfb7f2ffebf62424e746e083703baf552e72177ada910198992cb24572fcb732e38d92eb63a47d9a7a49e6

        • /data/data/com.tencent.qlauncher.theme763/databases/beacon_db-wal

          Filesize

          16KB

          MD5

          3a6c54784ee2e1c6e5c2ad767d17db19

          SHA1

          a7cfff1edd8be7a4531749f5abe08e4a70fcd0a7

          SHA256

          53266acda06efe253d793f5c0da98f780d0b7ef129427bb9b425086b014c0671

          SHA512

          a3e7b58ffe25e358512321286193dfba0a12f67e6e9c922c7ea918beec15947b6a0737550054a73b026a32c39a0ac7418200051af25be51bb9ac169b52f99bd4

        • /data/data/com.tencent.qlauncher.theme763/databases/download_database1.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.tencent.qlauncher.theme763/databases/download_database1.db-journal

          Filesize

          512B

          MD5

          035a3c0c0682f7e17e85126dc7b420c5

          SHA1

          6fc1c8bef072dfdda0ae0dc962c7501056544879

          SHA256

          0c383585939550fd452f411c7d110a5df1f759354be45f5720e8a6825f64cbf6

          SHA512

          e08cfb090e067cca5f7cb2d8f44879f8a83bc841c20a5b8b3fb91173d31e20090316aa3c1eb72251fa593749dd664bb63178715ce7783edecd9df7cd20ab49be

        • /data/data/com.tencent.qlauncher.theme763/databases/download_database1.db-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/com.tencent.qlauncher.theme763/databases/download_database1.db-wal

          Filesize

          32KB

          MD5

          0e59bca574a3b011c7e4c8f05d85ef74

          SHA1

          daf54a563f3efdf871c2224ec79dc7e6fe7e5b9a

          SHA256

          46a8be22067cd14e07b1de0705ba5e03fece655192ee7dafabe75b3e0a84041f

          SHA512

          08bdc0d0f38bd780fd18057a18822503023541b4ef4c099b60a905c04ca8cda550fc98e66b5c72f149de60d3ecf1219533e8639178d36f6d5a19bd5146b841ff

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          36KB

          MD5

          e864f53714a3b762fdb36d1836e9e8dc

          SHA1

          d5c1ea37d0acd2241cbbfbc64f8a8c288247536f

          SHA256

          de0d19986f7f6239887ed4bc2846eef1d397ce264cb80407bdfd6cac263c9c09

          SHA512

          b56ee1c12403e8133cc333fc661ecedeb2b4e2f8bf424331ff71d849bb50ee9c8c2bcb2c11db2476177e3e1007cb87b4ed8c494dacf8c79523bf7fc52c251b95

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          16KB

          MD5

          8b7b1d42449d9104b6260f28d2b0f378

          SHA1

          05938af0270cba1ded6bc0e39238bac8054fba4c

          SHA256

          5e6c9ebc3ce07157a460d98054b191d92597114d822e28a49b5f5a7dd57eb262

          SHA512

          1ec6640606869299da66665f0c356cb957489126bda937d44bbff018fa8d4b4cc81576721192094d1dee1526684a62dc1ea8fe5d0c395b3ea7159730a32f70c8

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          16KB

          MD5

          1291a91b1eab4f20b07da28150c33fab

          SHA1

          345f05cc6c6b86d5ed1841ab617d3a061c22462e

          SHA256

          878c9a4913e77748f803c0a6aaed421a71b1e9362f0b39387cc5c78c32d532d8

          SHA512

          88dd026d6d81dfa064da619c0ed376df17af3d2257180ac94b6dd6e3b280d07ec07bf73ec1dc72660f3b4309d835b22ffa19222baa8e86665f6fbeedda6bef5a

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          44KB

          MD5

          800649944c2a42e6ec82a4a342627f96

          SHA1

          a6655b36d9c7b24c0aea9a12b1bb68fea792441a

          SHA256

          4d273038fede535f0bd73630f20a1b3b51a1d3f74c93f2bc688d48b99543c844

          SHA512

          2d39e27a67e6f3a47a1a8a269fd524e1b4ce3edfca5352bebe0a03e1fa086d4a43c52e9a61d798aa1d7dc66fbc651a1a801339914fe5d34416a129cfe6e2c5a7

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          44KB

          MD5

          de957925c83c672b347ab724debf7b0e

          SHA1

          e844a834716bf61471c802be3e4ce3b12fe5ee0b

          SHA256

          d4f5427deb31aa8b0ccf0a397547247a1c834520b7337f7e0109a68021449a9f

          SHA512

          23460d92cfd18eabd245aa25f3120d9067d8f0510ea8b3ef1ce46c44d00846ae6b65132a64f8d0391ab66ee9f9133b56420ed99dbc0abacb51bd26741933d4d6

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db

          Filesize

          44KB

          MD5

          ea25a44c5f7c3d2763b0cec8ea033906

          SHA1

          d4fd1e205f7ea89a879d8ac5bd8b0251da78f8a3

          SHA256

          f0319d89aea03a0cc6295b5a43c784cc4f91954e141c520c2b9e8070f9171837

          SHA512

          8f13640208499d841e6c0007909d2bab4f14e33ba20cc6e6440c429a7245bf352cc3fe9bd0538033668348415fbc20c9807fcee7201dba48e1070f56ab859cdd

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-journal

          Filesize

          512B

          MD5

          04cdb237e772d64319be7301aa182bc1

          SHA1

          466530c252c2b4776ff7d082bd1448caa11cd1bf

          SHA256

          d28668d06754d57d84e62f276fa6fa48af02a694bde1533b79c0ebcfaf59abcc

          SHA512

          e9e612cbb581f87d16b2a432a4a2fc6a11af40b8278a6dba96e74eec8490af1ab25029d5f6d2c703cc94b9d2cd48741c36e22c581ba831c603683f601a78782e

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          4KB

          MD5

          d51e00b16472918f72636a88eeab1017

          SHA1

          a7f59a572d0214f0432f92a66a2a079c36bf1171

          SHA256

          d84f67a32915ce9f28145afe692e708108559fb841009fd6c170c1bac5499928

          SHA512

          f21fe75f3b969f8cb747f887cbb455c519638be8eb7b111d8f18f7272fc2675d2dfea342f0b58557dc23a1e7298aff0a3c3c41bdcdcef0600bd7fa2c544568c6

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          4KB

          MD5

          e09081a489ff056188d8156c9d6ee0f7

          SHA1

          56fc179dcc16db1d7e22eea77f03b2d6b3232b78

          SHA256

          3ee0daf05c827d0e8620c9e533b5bb819cfc409d517226b70785aaa7d4397c3f

          SHA512

          8390914e451aa2d24573f1e1971954458e2f1219c84d69fbf82cd61fe509219c818898e96ebcee9b599e6ccca4f3ee0bdfd2672863234d545a95c9c4bf6d24e4

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          8KB

          MD5

          9d583d48f56c56f7b2a465dbb04ca31f

          SHA1

          63673ad74de43e4cc682419b27fb9ab67fd0bf90

          SHA256

          25f364fdb86dfd5b8b3dffda75a056f22d4345452c256ff0ac1a6e9e8e339409

          SHA512

          52e79d20973ec466ac10e0d107d9cf38104fc11a8ef6d3a2ad4b0296c39f4ac2ecaf5294ed4bde293ac4d713fcfa1c06bf95f7adce29fb94e2cb704020407a2a

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          8KB

          MD5

          a6d5380af2a600dda75f4247735b7838

          SHA1

          8ca09308416ef50cfa76545b73a8d4a0d4d7039d

          SHA256

          9e5dc65a12dd0aeaaab77ff867a1dfb15e6276d2c4b840f35830b9a50b281eaf

          SHA512

          50bee1ebc6a696885de3a134321707394646e51088c1f740eb017091e717edc219f8be2e8d513d95aba8c9f8fcef160c1610cac9e7d24855f22b6e9f824af1a5

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          8KB

          MD5

          119449dc580ca7b4fc74771116e467fc

          SHA1

          334ad6f5016def2defe58b5dc1b51d6203ae0052

          SHA256

          47b83063f11dbc421e10877c2b89732b94eaff98b9c28768dc0130b6a1c8cc5e

          SHA512

          74fc4df98d325e5d44a18e2445206eb4ae7132336b6fd4a7b26c45472403c76ad5e0583b2e2bcf2bb22c64fef1ab1ef0d87ddbef3ebfa751332dfeb19fc7697f

        • /data/data/com.tencent.qlauncher.theme763/databases/eup_db-wal

          Filesize

          56KB

          MD5

          db6c851fa38a8f8f74daa54ee070e910

          SHA1

          5bd0947a48274ec08defae871c042c61466a385b

          SHA256

          e819d054283baacc93e4fff28087a859b7db70307c17208d5156e21eb4f0b65b

          SHA512

          02af823350ad15cb1a729e4bc9bb8309fa23604e0c2d1f3c206266e69c0418fac9628b816cbeec19f18d59416d2481c38eed58c3d0c3fde8f712f9dde5401adf

        • /data/data/com.tencent.qlauncher.theme763/databases/theme.db-journal

          Filesize

          512B

          MD5

          1c886f14d639642cd056980a967b9543

          SHA1

          84370ead911e8617b831035aa54dd6041a1e5895

          SHA256

          72bc02a2835c813a5a56f153bcbaa10e10acac6fa2176c50ca81bdb291ab4486

          SHA512

          458c689ceceae3387b00a5ad5226b548b441c0de0892d0116f23f8a75bf337078f2c8936c25ce50c096e22d3d8470f9ed12af54db5fd2396678e96647d51ba5c

        • /data/data/com.tencent.qlauncher.theme763/databases/theme.db-wal

          Filesize

          32KB

          MD5

          1cbb5c829e391118f3005a5868f1812a

          SHA1

          6e1c9c8d8bdd5bfafeb52e5ae2db9a79f13d9848

          SHA256

          18528b3933bf451a0bdbcf2744b6c5c4483d0151817a182324400b98012483b7

          SHA512

          7c7ed2b86b50ad17925091b9215af92c5aed292105e8d41bfe1e6489dac4f84d1161987b7dd5e5efe2593d309716dad0e4d1d72de6297b9a0771ff5aedec5af2