Analysis

  • max time kernel
    144s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    05/11/2024, 10:45

General

  • Target
    merchant_18188_release_previous_1.4.apk
  • Size 24.3MB
  • Sample241105-mtjdhszhmj
  • SHA256 5172a8a1564f3cf0811680163900ad4f9c5f8c19a5a9271e4815810ca6cef1e1
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.xinfa.bitmart18188
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4339

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        efsid4339

        • Path /data/data/com.xinfa.bitmart18188/app_UApm/efsid4339
        • Size 36B
        • SHA256 5ad86a59ea8d6e59f7c7d7edd420b360bf69b4fe39236d9abb7adf0cfa82ae83
        • MD5 SHA1 SHA512

        1156a2c2bb48e64769c4479939a5daa973ebc4c785cf172548b64216cef8c194.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/1156a2c2bb48e64769c4479939a5daa973ebc4c785cf172548b64216cef8c194.0.tmp
        • Size 126KB
        • SHA256 32bcae04efe26da79235df6cff841fc49fd59d67b544d11b9bb2d25ceabb4d59
        • MD5 SHA1 SHA512 SSDEEP

        20e1408d4f5ef9cf01e2156823008ae46b5d13e1dd8fcfb10d023a6fcfe79d1c.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/20e1408d4f5ef9cf01e2156823008ae46b5d13e1dd8fcfb10d023a6fcfe79d1c.0.tmp
        • Size 236KB
        • SHA256 21eeae12dfee764926715ad38f61f3d307638b19ddb27913cb6f6566ab390992
        • MD5 SHA1 SHA512 SSDEEP

        25ed7c57ab0bfc850665d0e780bb7f2a94ed714354a1b706af7390880b581918.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/25ed7c57ab0bfc850665d0e780bb7f2a94ed714354a1b706af7390880b581918.0.tmp
        • Size 1KB
        • SHA256 02f20f2e6a9529e3daac0a36599f47d2ccc582c2eb9285ee22d025c01e4cb86d
        • MD5 SHA1 SHA512

        2d6e04681ab2362fa575a22e0285918bcffa3d85be3c702f7ba29d1a99f1ab33.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/2d6e04681ab2362fa575a22e0285918bcffa3d85be3c702f7ba29d1a99f1ab33.0.tmp
        • Size 2KB
        • SHA256 981c1fd4d28c8947b3366d6ffbed05e66067ac4bc4e0335bc5770b3fca9d7daa
        • MD5 SHA1 SHA512

        37fedb3fdc9242f545116438dc7af53ded7900655124274beaa7393e2d7f3d7c.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/37fedb3fdc9242f545116438dc7af53ded7900655124274beaa7393e2d7f3d7c.0.tmp
        • Size 1KB
        • SHA256 5e8ba564a4f49a90164b1f77a96f3994142dd7c9cc940f443ff5ce6e419e64f7
        • MD5 SHA1 SHA512

        5372bac02be3ffac0ac2d82b65b95364d06d77f4a9a64ab82c343cea9cf9bd41.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/5372bac02be3ffac0ac2d82b65b95364d06d77f4a9a64ab82c343cea9cf9bd41.0.tmp
        • Size 176KB
        • SHA256 a98fe0a06b454078b7aad7a91c1b774c943e4129f6ef7a2768f42af61111db17
        • MD5 SHA1 SHA512 SSDEEP

        5db6e664639b4e73bbfeef69cb99f120efae58d26e5ec733648e618fac8320cd.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/5db6e664639b4e73bbfeef69cb99f120efae58d26e5ec733648e618fac8320cd.0.tmp
        • Size 929B
        • SHA256 882254daeaf105f0067069ef2e4cb2e8887f02ca898257f8ae3eb688ee421412
        • MD5 SHA1 SHA512

        62f9884af0f6ed32dd0aaec1313881cc5733f4f2723185fc687828dfac9957d6.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/62f9884af0f6ed32dd0aaec1313881cc5733f4f2723185fc687828dfac9957d6.0.tmp
        • Size 1KB
        • SHA256 40508a91523c0183286811f535e11155423ece1b262aa0b21a9e4a0d681e0ad8
        • MD5 SHA1 SHA512

        6c2bb697bed3725227dd851bb745d374ed8c62e8e35f43b0821ff36b2ef24c94.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/6c2bb697bed3725227dd851bb745d374ed8c62e8e35f43b0821ff36b2ef24c94.0.tmp
        • Size 872B
        • SHA256 8bf647446b7e67fcca37b6c5de9e1bf2d075fd004a16773873b1c1bad151c7a5
        • MD5 SHA1 SHA512

        6f4894f950ff51c6e49d49073ce90f5c52149767e126938e57bfebbc20cec235.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/6f4894f950ff51c6e49d49073ce90f5c52149767e126938e57bfebbc20cec235.0.tmp
        • Size 588B
        • SHA256 b49e599f0ec4a4e6ac8254c8663e663326bd829cd53d3f8ea897c57465021a88
        • MD5 SHA1 SHA512

        7c6bade8647cf8f0eafa830bed1e7675c16f7b554122fb8c772d859a54a2b76b.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/7c6bade8647cf8f0eafa830bed1e7675c16f7b554122fb8c772d859a54a2b76b.0.tmp
        • Size 87KB
        • SHA256 474f440cf51a9c8bbb466a0a479556c58b484ea8c69a5346a2a515ba516a24aa
        • MD5 SHA1 SHA512 SSDEEP

        871280074fa4e42d5d07234f2c0162c7049ac695faec390e8c2eab00aea65105.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/871280074fa4e42d5d07234f2c0162c7049ac695faec390e8c2eab00aea65105.0.tmp
        • Size 834B
        • SHA256 6f48de33ba2db09b0bfeca37cdb3c344d7b639e4097e0de2418cd29dbabbc133
        • MD5 SHA1 SHA512

        b10f636eedf7aaa0f64313da7abe8a851e04da5433ca8ef58e2b7d50e0f28edf.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/b10f636eedf7aaa0f64313da7abe8a851e04da5433ca8ef58e2b7d50e0f28edf.0.tmp
        • Size 2KB
        • SHA256 a31f82bddaa16cc9db6314bf0d03fbe625f641d03269bed4e9931e51967b4cfd
        • MD5 SHA1 SHA512

        b81a9a2af67c23b00ff0c72cbe77a65aae9392f162069844843f709a667265f8.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/b81a9a2af67c23b00ff0c72cbe77a65aae9392f162069844843f709a667265f8.0.tmp
        • Size 255KB
        • SHA256 8499bc64dd76540b655fc82f65852497283e2079bcfab42fd540ae57533c89d0
        • MD5 SHA1 SHA512 SSDEEP

        beb47f3adb100793e0ace47d8865bbf041620947ad96f0b93a8b346f107a0600.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/beb47f3adb100793e0ace47d8865bbf041620947ad96f0b93a8b346f107a0600.0.tmp
        • Size 565B
        • SHA256 30d67dca3058c6cdb562763d896951cb512dc53530c55b802ab575aae0196bdd
        • MD5 SHA1 SHA512

        c42a52e14598bdef8498f9cb52bbb24ed447b38c598edc0e430f20d63e0015aa.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/c42a52e14598bdef8498f9cb52bbb24ed447b38c598edc0e430f20d63e0015aa.0.tmp
        • Size 184KB
        • SHA256 b19ef7b053b10a62bdbfb4a84a7b2940ddc657ca83cb26c86929935315fcf617
        • MD5 SHA1 SHA512 SSDEEP

        cf9578419125f4445b0a8cc2fd8d7017d272e41df2b04085676724ef65c34879.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/cf9578419125f4445b0a8cc2fd8d7017d272e41df2b04085676724ef65c34879.0.tmp
        • Size 120KB
        • SHA256 fedb7b3ece4507ed1801bdbb8ef7760de61519361d76d9b323a80126277cd4b6
        • MD5 SHA1 SHA512 SSDEEP

        d83f13d43577da73581d90af4f0f506180dca1cdfc76c7b93be0d58353af51e7.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/d83f13d43577da73581d90af4f0f506180dca1cdfc76c7b93be0d58353af51e7.0.tmp
        • Size 100KB
        • SHA256 82a6ef3b97e683cd42429e481926052b35a1f901ef2d71f5c92b04c01ca7182b
        • MD5 SHA1 SHA512 SSDEEP

        e3ef39b3fd2708d5d7c1458b5c8f3c3cf1c3f5f912be061b526c2fd85dd4783c.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/e3ef39b3fd2708d5d7c1458b5c8f3c3cf1c3f5f912be061b526c2fd85dd4783c.0.tmp
        • Size 493B
        • SHA256 5a23421841d83f527cc5dc27fd1bc5eb5463a9f7e900ce9be6788898312d8204
        • MD5 SHA1 SHA512

        f47e74b01a654275d0aba88cd64b9727ae906160b3e1652025a741a8e3e3fb93.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/f47e74b01a654275d0aba88cd64b9727ae906160b3e1652025a741a8e3e3fb93.0.tmp
        • Size 604B
        • SHA256 1e4e8f8aa2f1a6348fd77df3c07b6a8dff0bf6cec4353afdd29acc07f47f4c17
        • MD5 SHA1 SHA512

        faf4162485a4c2d805f1fa48b6719046cedc2a944f698e556026083f1cd24d2a.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/faf4162485a4c2d805f1fa48b6719046cedc2a944f698e556026083f1cd24d2a.0.tmp
        • Size 201KB
        • SHA256 3efec066d1d10de50df3ec058beb6afb1cc5b6131640250c00261268b1576e0b
        • MD5 SHA1 SHA512 SSDEEP

        fcb1e4d964fc4824a0cbf4a0560f2487828e8cd3b9d264ef2326c434202b400c.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/fcb1e4d964fc4824a0cbf4a0560f2487828e8cd3b9d264ef2326c434202b400c.0.tmp
        • Size 92KB
        • SHA256 a0dc05f73704d661011407176cf9d6990c309d8dcce54cb9afe83d05dfd4bfcf
        • MD5 SHA1 SHA512 SSDEEP

        fd302ac66d3a8bdd94efee656110fcac6ab6fccc3e72be0f2bbe66b9d3fd7cd7.0.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/fd302ac66d3a8bdd94efee656110fcac6ab6fccc3e72be0f2bbe66b9d3fd7cd7.0.tmp
        • Size 1KB
        • SHA256 77dc8e20d28bad3a18a1695b286b7cd3112bdbdb7f5b54875ccd72fff9c7020f
        • MD5 SHA1 SHA512

        journal

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/journal
        • Size 4KB
        • SHA256 c650e5ca583865ef9ce06e26315fb6edcdff1e5e6b3e557b02a209bec178ef48
        • MD5 SHA1 SHA512 SSDEEP

        journal.tmp

        • Path /data/data/com.xinfa.bitmart18188/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        88181TRAMTIB0AFNIX0MOC.ss

        • Path /data/data/com.xinfa.bitmart18188/crashsdk/tags/88181TRAMTIB0AFNIX0MOC.ss
        • Size 1B
        • SHA256 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111
        • MD5 SHA1 SHA512

        unique

        • Path /data/data/com.xinfa.bitmart18188/crashsdk/tags/unique
        • Size 36B
        • SHA256 183a752af8e2e40c057d0c130be6f93e690048cdb31f7fc9ee3dd11c02171d75
        • MD5 SHA1 SHA512

        ver

        • Path /data/data/com.xinfa.bitmart18188/crashsdk/tags/ver
        • Size 22B
        • SHA256 7b4f38c8c0ed9e5a8c2e59a5b6a38e3e6f7c626aca06c41ab4be6dbdc8593160
        • MD5 SHA1 SHA512

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 40KB
        • SHA256 8df578d324fff36d3b4138dec5a324167055a95255ff81a8ca5bf6302c75aee3
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 24KB
        • SHA256 f5851e6abe41d227c60e4044e316d991ab20fa9adfc9715c00d288740a76c982
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 32KB
        • SHA256 657f64e3228295dc04a2ae3002253e552870b55c02470512cef190ebd7615a84
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 36KB
        • SHA256 c21e7b7d2aabfc6c65bb34469e981ee736037bc4a6454675cb56181a9bce3fd0
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 16KB
        • SHA256 06c0b24a8729bfa089b35ac487ec7e1c495e1b1d46d6f2ba6c6be6a40e1f5aa5
        • MD5 SHA1 SHA512 SSDEEP

        ua.db

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db
        • Size 16KB
        • SHA256 4e6052de98616c83f42d417514bd4e86bbca295bd4949ccf1cacb632070b9454
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 512B
        • SHA256 46f397a2b20619cc88121f21602b6f425ff3fc21d0dbe329ec024311eff0519e
        • MD5 SHA1 SHA512

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 8KB
        • SHA256 a85071066e0da0864bd319d4e0e84533d940badeacaba635aa71a6e5b393bd8e
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 8KB
        • SHA256 499d9be7095c73794cd59657b4393662212c1a8fd279018a70156a450b9191fd
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 12KB
        • SHA256 16bdb11a97a441d53ee5ad730d8710911d34c0cde847cc46acc54d00f62c975d
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 16KB
        • SHA256 53b476a5e14e4192b361aabb011a062917904ca62ea4abbfd4398872d94e0a72
        • MD5 SHA1 SHA512 SSDEEP

        ua.db-journal

        • Path /data/data/com.xinfa.bitmart18188/databases/ua.db-journal
        • Size 16KB
        • SHA256 d56d528d6ceec79b15997fa3cd4313b9bbd851abfd50b74be242613e48518cfd
        • MD5 SHA1 SHA512 SSDEEP

        z==1.2.0&&1.4_1730803540199_emNmZw== .log

        • Path /data/data/com.xinfa.bitmart18188/files/.envelope/z==1.2.0&&1.4_1730803540199_emNmZw== .log
        • Size 284B
        • SHA256 11ce57e15425d2da4c9e59159b5c38bab16c949824fb5b3b0ea0ac4fdd07941d
        • MD5 SHA1 SHA512

        exchangeIdentity.json

        • Path /data/data/com.xinfa.bitmart18188/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 f2d76b4953a08d06f5cb71097292548e92a8fcf9fa621c494bd773f7597be470
        • MD5 SHA1 SHA512

        exid.dat

        • Path /data/data/com.xinfa.bitmart18188/files/exid.dat
        • Size 57B
        • SHA256 211aae9ccdce2427dcc6519708df2b0d70cfe28b562be7c7473009948aa4adaf
        • MD5 SHA1 SHA512

        mmkv.default

        • Path /data/data/com.xinfa.bitmart18188/files/mmkv/mmkv.default
        • Size 64KB
        • SHA256 de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31
        • MD5 SHA1 SHA512 SSDEEP

        mmkv.default.crc

        • Path /data/data/com.xinfa.bitmart18188/files/mmkv/mmkv.default.crc
        • Size 4KB
        • SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
        • MD5 SHA1 SHA512

        profileInstalled

        • Path /data/data/com.xinfa.bitmart18188/files/profileInstalled
        • Size 24B
        • SHA256 0672bfd5cb54f9c2efa1827cde841f67329602602c03a993b8fc11dbf26bcecb
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.xinfa.bitmart18188/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 410fb274b122fa64a4ebde696a66f1a88416eadd52537ccf96a22e369ca360db
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.xinfa.bitmart18188/primary.prof
        • Size 2KB
        • SHA256 1751da22c61f0680ad730211a03f96097c86d7060ee4fd062ee177ba4837692f
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.xinfa.bitmart18188/primary.prof
        • Size 15KB
        • SHA256 d8cc64c4bb764ba738efe7fc7a20badea9d8313fdc11d672ec75c0b5f17829f2
        • MD5 SHA1 SHA512 SSDEEP

        primary.prof

        • Path /data/misc/profiles/cur/0/com.xinfa.bitmart18188/primary.prof
        • Size 16KB
        • SHA256 33b5f71e5265c3ca731f449dec4b6878df16b7f5fa8e2e4be71b73724210107d
        • MD5 SHA1 SHA512 SSDEEP

        primary.prof

        • Path /data/misc/profiles/cur/0/com.xinfa.bitmart18188/primary.prof
        • Size 16KB
        • SHA256 5ec05e82fd524f071a8906f39ad7900bc02abcd4522ae1346ba84fd352109f04
        • MD5 SHA1 SHA512 SSDEEP