Analysis

  • max time kernel
    3816474s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    20-05-2022 21:56

General

  • Target

    09ddeeb2981d7b8e50df1f66d771099fe6b12ea40a60a7bc6f6ba7ad73ddf923.apk

  • Size

    139KB

  • MD5

    0eaf23acf3c1f9e7130c2e4887abb6f7

  • SHA1

    1d5d4b630eecbf8694653529319ee19d60d563cf

  • SHA256

    09ddeeb2981d7b8e50df1f66d771099fe6b12ea40a60a7bc6f6ba7ad73ddf923

  • SHA512

    d9c82d9d2fa34930edbf46b4ee644a41f593b111131256d813f3391f00411ad2531af69e67068c54017447ad2638346c81f57de846844e36c0aaadf22c8275d2

Score
7/10

Malware Config

Signatures

  • Checks known Qemu pipes. 1 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • yyc.app.ajsjmwqr
    1⤵
    • Checks known Qemu pipes.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6225

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/.com.google.Chrome.FcIxSd

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/Cookies

    Filesize

    64KB

    MD5

    9b23e6a88d5a95f155f205cb04b93cd0

    SHA1

    b62dccbbef087a0731f226b96d15d35d8aa5e5fc

    SHA256

    f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

    SHA512

    bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    4d893642ae648b3d1f00ef00d5675881

    SHA1

    bfb9dc0112a0558ebe388548728269c10b923fc5

    SHA256

    e7624e23ab0261a6f671c388ebf35cbb98b00edc2f51797ce00ad2bc43a7fb64

    SHA512

    aa15b217ed5a58c6a32b0de51c90fe243e39bf8ccee9929f47098a55ed8b449931dafd1f16ad6f717b1fef2544b5572f6245e03dc295635067948f538ef0d204

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    8d7b019b161e3eb518bf17c739d61054

    SHA1

    907ca02efae78c0dc99b769e03e19b2006cbd6d5

    SHA256

    a731131da082fa4af4cef128700ab2498acbaafcf21ac10c0b361acbab7c907d

    SHA512

    bfcc64505f20f7b537c8b04980599653c50bb0fc8b98912728ac15450def271b84cf3c277106d983c4162b609420fd7a363c28e3a43bb82d26c9c74b75c78b5b

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    91c10528c19d8dc577f897d3805f73e3

    SHA1

    c2847c8914d4322f2b197aaa722d67dfb49c141d

    SHA256

    81fbb02a9cbb3b35cf49b72d497b055092bfe0f29fff1a7b6d603672777cd511

    SHA512

    b89920903d7c1842df606ecb5115e645c172858dada5f83f7f4307d67bffb8c8550320a388e3fcff2137b620685aaf96d92f5560eeb10770cfb8d41bc673da8b

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/metrics_guid

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/metrics_guid

    Filesize

    36B

    MD5

    e09d97527fafeea34e25ef105f3d87f7

    SHA1

    7cbb88da615134c73c1cfea56587764159c3d41b

    SHA256

    8f47db279b8e61753f504ef53b0310e108c1fa319fadf443defce2cd3a797aba

    SHA512

    822449870e244f99937ee344dbafaacae6f8da0e1ac88471c0ab41ce4ad988551aefed4023c1f2f2f704494126df2b3c2f0cec6f36df68189efab8c745b1c2c7

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/yyc.app.ajsjmwqr/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/yyc.app.ajsjmwqr/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    3ce7b08c74260969df516bfd2d99b5fa

    SHA1

    4c0c0898747a9a8a1ea8d55628e33edecee63904

    SHA256

    9a897d41d192bb71c6287b4fb0e7eea8ca12ba6fe3a7e035e4fb7895b7fce6e6

    SHA512

    5157eff0fb985096784c5086104124950331683686f2a3a600c20354b69348b1f78b8d07de2df1c892f6b44f9d7bd06dd50c03060208b8fe0d5acf51330a9c73

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/5e8e2f7ad2cc531c_0

    Filesize

    698B

    MD5

    197a1fbede2846e8b6a4dcea3d5cc839

    SHA1

    23568d4d1e43e881ed69b828cefe249fe129fe7b

    SHA256

    b34413cf333839ea6affd2bde372ad2b79afec2e195ea989ac83855d0ecacf72

    SHA512

    724053eb60ffd874aec8590d5d4d264c5ee6126c19187aa713b4f9a70ab04601c273bf8e641e4e40350169a8495614fd9c30196b5849069e58bcfeb8cc6f7132

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    a33afa130522a8f39ae7bb72c7128de7

    SHA1

    e2efc92ba8887811092c9457f9037799c6deadd1

    SHA256

    6de27c50a5ef1fad7c8187d4feffa39ea8fa5273996ce3de9304028070312b60

    SHA512

    d47a04e9d0b36824285bf445efda3abbfbc6067c17ab38edfcaa445df0e77a5d01b11d7168b0b4b643eccc385bbc8f220d942d49a5efdec5ad4e25fcacf06471

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    ba4cfb2063112013dd4f5b590263b8ce

    SHA1

    ace265e4281d8914e45355398589babe9212b734

    SHA256

    eba41620dd7d2ac0d58aa5087756dcecde659bbb67820773be5468bbd0d872e5

    SHA512

    e3f199a7c57de1c982acb04b5c712bdbe2796f66a743a3fa264fbc6b55f067a50b37a27502222cbb302a5c92fb8b8d6ec17e515a16079c1bec7524fdc6210256

  • /data/user/0/yyc.app.ajsjmwqr/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    96B

    MD5

    6e8f51ea7421e5a4639203d2e2d66661

    SHA1

    5192aba6981818eace10230ad98769fadd425357

    SHA256

    f54585c6b1fa121b9a3d53e9c18ab44b617cd0e43ffe4197d95bc9b03b45cd3e

    SHA512

    4db68e532277363c2ada253bae293fe2dc30608a86b5db917c9417597cb230c71e2e3e67db17b3f6a4512cccd6dbda042ae6bd15932f2fb35daefa4d59b0d932

  • /data/user/0/yyc.app.ajsjmwqr/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9