b4e8b5aa7c3afee74220f66a26387e463d4a5692f30d06035af203dc482511e0

Analysis

max time kernel
137s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20/10/2024, 02:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
youni.apk
Size 1.3MB
Sample241020-c87pjsvbjd
SHA256 a1c998e1a2b0d636347ad5dc3192ef2c2a2137de49d8024c8ed7717f92de5de8
MD5 f51d1a5d4c80374966663a4e3fcb9585
SHA1 eb729e0f3a6c73f2b4490f2f98d6d5782181ec26
SHA512 4c12776451ca825693fb4af1f595aaf3e1016547552a370915c122352e32af2e01567948704d1d0b1d4a3f1f61ce4a3af6b151e56101e9d783d002f3cb21697a
SSDEEP 24576:DANrM/KjthUFS+3mpYniQUWSeQDxW0X0FxnUsh7d5x9JAQw8xs:DApMGUfmpSgUehKxnZdm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection discovery impact

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.snda.youni

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.snda.youni

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.snda.youni

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.snda.youni

com.snda.youni
1⤵
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4630

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

youni.db

Path /data/user/0/com.snda.youni/databases/youni.db
Size 32KB
SHA256 9c01bb0bc3f291618d2be3c9761e00cf043dc05f5a6abe3a45e37d2fbc90dde2
MD5 b6fe5a1dc1466ba579ecc712b17b216e
SHA1 03f39b102b8e2409f08f4fe4f7d5faf3b6888fad
SHA512 09dd2639d5b11446c85036762e88ca1e9996ea6ac3ea3f0121a66ab9b798b6450e25530950c42429849fb9ad12706721585f5e6a4b0d62f4436bc44ab2b8ca2f
SSDEEP 24:TL55O4IR/RdPB2DMbmBA21cUB9dd+B2Q1nJYzTYIBqJIZf9PKVGSZGQQQ:T95Olvp2MmBAtUB9mB262gCqypNKQS
MD5 SHA1 SHA512 SSDEEP

Submit Download

youni.db-journal

Path /data/user/0/com.snda.youni/databases/youni.db-journal
Size 512B
SHA256 9282799f0850d722085279a06b647a363b195b4781d2834aee6a518d4d7904fa
MD5 5d8db42678d9872e68c8166f41357249
SHA1 e6df770d0d699f2ffca9ae6b5954e0e34b40e655
SHA512 55e406305f75a1a3058b9f0e681b58e9cb5f87fb169090cf049fbef38955275bdc33dac7aee8e027fc2c3d84262a7e802e925b74335fe57089c7a65268996dc1
MD5 SHA1 SHA512

Submit Download

youni.db-journal

Path /data/user/0/com.snda.youni/databases/youni.db-journal
Size 8KB
SHA256 8fd0ad1cc4bb3181f2ba0455381b38f949715e50968cce6cf16ac18cb5100f6a
MD5 92874f699fbe1e0bc9785b5fde27e0c4
SHA1 7d6c66ff6a2528dde141894484f2c34615979cb2
SHA512 145857a11523a37d3b74b7e34d53cdbd39d0fdf1067d279677724c318ddbe08b9d752349cab8c1e31a135b8aca8fa87def9edf16587a3086ec9110960feb05ac
SSDEEP 6:7+/l9iAn1Ug9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKB:7+to9qLiuWdYRmBEyPb6
MD5 SHA1 SHA512 SSDEEP

Submit Download

youni.db-journal

Path /data/user/0/com.snda.youni/databases/youni.db-journal
Size 8KB
SHA256 2bff0ea1442e1de6c46fe6753ac9970af55c38b988c50e64d8d5f2d1569a2ba4
MD5 31924df7aa1911486ae50a3fdbf02e8e
SHA1 f259de42393823f8ae6871d89a9a68a765cef1ad
SHA512 dd298b19f9952b71b10be0cff562574e43fe0d9dafcae6409334bad4caa4deeea3838cc4d502602ad541eec2dc8cfb3e5f780f1f635716a01143b14a04636ef0
SSDEEP 6:7+/l924Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKiZ/K:7+towqLJdeWRmBEyPbTBK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads