FakeBanker DroidBox

{"apkName": "/root/work/apk/DroidBox_4.1.1/APK/FakeBanker.apk", "enfperm": [], "recvnet": {"8.239814043045044": {"data": "485454502f312e3120343036204e6f742041636365707461626c650d0a446174653a204d6f6e2c203238204a756c20323031342031333a32393a333820474d540d0a5365727665723a204170616368650d0a436f6e74656e742d4c656e6774683a203332", "host": "80.74.128.17", "type": "net read", "port": "80"}, "8.254730939865112": {"data": "783d31300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a0d0a3c21444f43545950452048544d4c205055424c49432022", "host": "80.74.128.17", "type": "net read", "port": "80"}, "936.140398979187": {"data": "783d31300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a0d0a3c21444f43545950452048544d4c205055424c49432022", "host": "80.74.128.17", "type": "net read", "port": "80"}, "960.0330131053925": {"data": "783d31300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a0d0a3c21444f43545950452048544d4c205055424c49432022", "host": "80.74.128.17", "type": "net read", "port": "80"}, "905.9116559028625": {"data": "485454502f312e3120343036204e6f742041636365707461626c650d0a446174653a204d6f6e2c203238204a756c20323031342031333a34343a333620474d540d0a5365727665723a204170616368650d0a436f6e74656e742d4c656e6774683a203332", "host": "80.74.128.17", "type": "net read", "port": "80"}, "936.1342990398407": {"data": "485454502f312e3120343036204e6f742041636365707461626c650d0a446174653a204d6f6e2c203238204a756c20323031342031333a34353a303620474d540d0a5365727665723a204170616368650d0a436f6e74656e742d4c656e6774683a203332", "host": "80.74.128.17", "type": "net read", "port": "80"}, "905.9337849617004": {"data": "783d31300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d69736f2d383835392d310d0a0d0a3c21444f43545950452048544d4c205055424c49432022", "host": "80.74.128.17", "type": "net read", "port": "80"}, "960.0275619029999": {"data": "485454502f312e3120343036204e6f742041636365707461626c650d0a446174653a204d6f6e2c203238204a756c20323031342031333a34353a333020474d540d0a5365727665723a204170616368650d0a436f6e74656e742d4c656e6774683a203332", "host": "80.74.128.17", "type": "net read", "port": "80"}}, "servicestart": {}, "sendsms": {}, "cryptousage": {"9.287545919418335": {"operation": "keyalgo", "type": "crypto", "algorithm": "Blowfish", "key": "52, 101, 54, 54, 55, 54, 54, 101, 54, 98, 54, 97, 54, 99, 54, 101, 55, 54, 54, 98, 54, 97, 52, 98, 52, 51, 52, 101, 53, 56, 52, 98, 52, 52, 52, 98, 52, 99, 52, 54, 52, 56, 53, 51, 52, 98, 52, 52, 51, 97"}, "960.306095123291": {"operation": "keyalgo", "type": "crypto", "algorithm": "Blowfish", "key": "52, 101, 54, 54, 55, 54, 54, 101, 54, 98, 54, 97, 54, 99, 54, 101, 55, 54, 54, 98, 54, 97, 52, 98, 52, 51, 52, 101, 53, 56, 52, 98, 52, 52, 52, 98, 52, 99, 52, 54, 52, 56, 53, 51, 52, 98, 52, 52, 51, 97"}, "936.4329519271851": {"operation": "keyalgo", "type": "crypto", "algorithm": "Blowfish", "key": "52, 101, 54, 54, 55, 54, 54, 101, 54, 98, 54, 97, 54, 99, 54, 101, 55, 54, 54, 98, 54, 97, 52, 98, 52, 51, 52, 101, 53, 56, 52, 98, 52, 52, 52, 98, 52, 99, 52, 54, 52, 56, 53, 51, 52, 98, 52, 52, 51, 97"}, "906.2297549247742": {"operation": "keyalgo", "type": "crypto", "algorithm": "Blowfish", "key": "52, 101, 54, 54, 55, 54, 54, 101, 54, 98, 54, 97, 54, 99, 54, 101, 55, 54, 54, 98, 54, 97, 52, 98, 52, 51, 52, 101, 53, 56, 52, 98, 52, 52, 52, 98, 52, 99, 52, 54, 52, 56, 53, 51, 52, 98, 52, 52, 51, 97"}}, "sendnet": {"8.17966103553772": {"type": "net write", "desthost": "80.74.128.17", "fd": "17", "operation": "send", "data": "504f5354202f696d616765732f312e70687020485454502f312e310d0a557365722d6167656e743a204d6f7a696c6c612f342e373620284a6176613b20553b4c696e75782061726d76376c20322e362e32392d67633439376534313b2072753b20546865", "destport": "80"}, "905.8556900024414": {"type": "net write", "desthost": "80.74.128.17", "fd": "23", "operation": "send", "data": "504f5354202f696d616765732f312e70687020485454502f312e310d0a557365722d6167656e743a204d6f7a696c6c612f342e373620284a6176613b20553b4c696e75782061726d76376c20322e362e32392d67633439376534313b2072753b20546865", "destport": "80"}, "936.0900819301605": {"type": "net write", "desthost": "80.74.128.17", "fd": "28", "operation": "send", "data": "504f5354202f696d616765732f312e70687020485454502f312e310d0a557365722d6167656e743a204d6f7a696c6c612f342e373620284a6176613b20553b4c696e75782061726d76376c20322e362e32392d67633439376534313b2072753b20546865", "destport": "80"}, "959.9896869659424": {"type": "net write", "desthost": "80.74.128.17", "fd": "33", "operation": "send", "data": "504f5354202f696d616765732f312e70687020485454502f312e310d0a557365722d6167656e743a204d6f7a696c6c612f342e373620284a6176613b20553b4c696e75782061726d76376c20322e362e32392d67633439376534313b2072753b20546865", "destport": "80"}}, "accessedfiles": {"49504571": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1750374545": "/proc/1205/cmdline", "611672408": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1698628285": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1682760131": "/dev/urandom", "245048332": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "454502974": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1338563989": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "439757312": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1274623999": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1085490383": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "17845467": "/proc/1197/cmdline", "1887065192": "/proc/1184/cmdline", "583744383": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "225285692": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "946951002": "/proc/wakelocks", "241964398": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "674494834": "/proc/1239/cmdline", "395980691": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1192869550": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "1614218013": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml"}, "fdaccess": {"3.4309349060058594": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22444f574e4c4f4144444f4d41494e223e63657274696669", "id": "1698628285", "type": "file read"}, "4.436057090759277": {"path": "/proc/1184/cmdline", "operation": "read", "data": "636f6d2e676d61696c2e787061636b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702f46616b6542616e6b65722e61706b0061696e41637469", "id": "1887065192", "type": "file read"}, "7.574428081512451": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22444f574e4c4f4144444f4d41494e223e63657274696669", "id": "454502974", "type": "file read"}, "960.5185921192169": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "245048332", "type": "file write"}, "970.0613479614258": {"path": "/proc/wakelocks", "operation": "read", "data": "6e616d6509636f756e74096578706972655f636f756e740977616b655f636f756e74096163746976655f73696e636509746f74616c5f74696d6509736c6565705f74696d65096d61785f74696d65096c6173745f6368616e67650a224b65794576656e74", "id": "946951002", "type": "file read"}, "926.9655640125275": {"path": "/proc/1239/cmdline", "operation": "read", "data": "636f6d2e616e64726f69642e65786368616e67650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702f46616b6542616e6b65722e61706b0061696e41637469", "id": "674494834", "type": "file read"}, "958.2472591400146": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "611672408", "type": "file read"}, "936.5226640701294": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "583744383", "type": "file write"}, "9.428658962249756": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22444f574e4c4f4144444f4d41494e223e63657274696669", "id": "1085490383", "type": "file write"}, "934.5026330947876": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "225285692", "type": "file read"}, "4.487092018127441": {"path": "/proc/1197/cmdline", "operation": "read", "data": "6c6f676361740044726f6964426f783a570064616c76696b766d3a570041637469766974794d616e616765723a49000000000000000000000000000000000000000000000000000000000000702f46616b6542616e6b65722e61706b0061696e41637469", "id": "17845467", "type": "file read"}, "36.27146005630493": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22444f574e4c4f4144444f4d41494e223e63657274696669", "id": "439757312", "type": "file read"}, "9.548044919967651": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22444f574e4c4f4144444f4d41494e223e63657274696669", "id": "241964398", "type": "file write"}, "924.0081720352173": {"path": "/dev/urandom", "operation": "read", "data": "453000efbfbd327156efbfbdefbfbdefbfbd34213defbfbd4e64efbfbdefbfbd0f56", "id": "1682760131", "type": "file read"}, "9.652492046356201": {"path": "/proc/1205/cmdline", "operation": "read", "data": "636f6d2e676d61696c2e787061636b3a72656d6f7465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000702f46616b6542616e6b65722e61706b0061696e41637469", "id": "1750374545", "type": "file read"}, "936.612114906311": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "1274623999", "type": "file write"}, "906.3676869869232": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "1338563989", "type": "file write"}, "906.2809870243073": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "395980691", "type": "file write"}, "64.66722798347473": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "read", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "1192869550", "type": "file read"}, "36.31706094741821": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "1614218013", "type": "file write"}, "960.4347360134125": {"path": "/data/data/com.gmail.xpack/shared_prefs/MainPref.xml", "operation": "write", "data": "3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d3827207374616e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d22504153534144444544222076616c75653d223130333030333422", "id": "49504571", "type": "file write"}}, "dataleaks": {}, "opennet": {"8.12398099899292": {"desthost": "80.74.128.17", "fd": "17", "destport": "80"}, "905.8012630939484": {"desthost": "80.74.128.17", "fd": "23", "destport": "80"}, "936.0457739830017": {"desthost": "80.74.128.17", "fd": "28", "destport": "80"}, "959.9393260478973": {"desthost": "80.74.128.17", "fd": "33", "destport": "80"}}, "recvsaction": {"com.gmail.xbroadcast.MessageReceiver": "android.provider.Telephony.SMS_RECEIVED", "com.gmail.xbroadcast.OnBootReceiver": "android.intent.action.BOOT_COMPLETED"}, "dexclass": {"0.38909411430358887": {"path": "/data/app/com.gmail.xpack-2.apk", "type": "dexload"}, "4.794946908950806": {"path": "/data/app/com.gmail.xpack-2.apk", "type": "dexload"}, "923.3459711074829": {"path": "/system/app/Exchange2.apk", "type": "dexload"}}, "hashes": ["7276e76298c50d2ee78271cf5114a176", "e370ab3f1fbecfc77bdc238591d85882923ed37e", "94900b378a59be625cc7d54ef7b0c427e3ae770e178d609d584cfc78e7f4aad0"], "closenet": {}, "phonecalls": {}}