Analysis
-
max time kernel
3824451s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 00:02
Static task
static1
Behavioral task
behavioral1
Sample
4f006c6db9c57e31ad86cb6abbecba30aec34f446dc3ca3456ac5198f476b99d.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
4f006c6db9c57e31ad86cb6abbecba30aec34f446dc3ca3456ac5198f476b99d.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
4f006c6db9c57e31ad86cb6abbecba30aec34f446dc3ca3456ac5198f476b99d.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
4f006c6db9c57e31ad86cb6abbecba30aec34f446dc3ca3456ac5198f476b99d.apk
-
Size
661KB
-
MD5
11522c2cd1628c17d0c69fe314c91c2c
-
SHA1
045fee8232e3c477b486a3af2f30018bdc561a33
-
SHA256
4f006c6db9c57e31ad86cb6abbecba30aec34f446dc3ca3456ac5198f476b99d
-
SHA512
11c194b6ab2326b7ad0e0a91152ae117b7685f3f7e2c9cdf11d5776ee32a7e62bace4a3d0bb1431750d3e49c50f3c380a990f0e92650afeb21c6d35bea58e807
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.htsoft.app.superbatteryioc pid process /data/user/0/com.htsoft.app.superbattery/files/target.dex 6190 com.htsoft.app.superbattery /data/user/0/com.htsoft.app.superbattery/fileswapsdk/local/220521020852233.dex 6190 com.htsoft.app.superbattery -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.htsoft.app.superbatterydescription ioc process Framework API call javax.crypto.Cipher.doFinal com.htsoft.app.superbattery
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.htsoft.app.superbattery/app_webview/.com.google.Chrome.4YzRurMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/app_webview/CookiesFilesize
64KB
MD59b23e6a88d5a95f155f205cb04b93cd0
SHA1b62dccbbef087a0731f226b96d15d35d8aa5e5fc
SHA256f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
SHA512bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
-
/data/user/0/com.htsoft.app.superbattery/app_webview/Cookies-journalFilesize
1KB
MD5e3fb130f61e6336aa2c7ef8b3cfc37af
SHA10d387f4fbe16ee9bce6534476c37a72029bd6c67
SHA2561f8371648adc2d6148903bc8d635992a94f6028e019a840ab9672f87687b7ba2
SHA512cdb514bb17885b23ef1793dfc9213adcc9cd5edb9946a61ed12649ffe3ef911459260cc87be6f2d46707920f06df475d99e2cc7dcc90ca6f9e4f8fdacb706a4d
-
/data/user/0/com.htsoft.app.superbattery/app_webview/GPUCache/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.htsoft.app.superbattery/app_webview/GPUCache/index-dir/temp-indexFilesize
96B
MD525fc743d00a1003585e1420f958d9d5f
SHA1063229c937c88adcbbe43824dbb9ac8639f24909
SHA256f8eda49af91687c32fd375b485e91d666f3a8475d52892c1d02bc4eea35332b0
SHA512ad53d0cf2316496f4f8c494ff9df11b80f38da37d22f0f2297441cf5784bf95d8edd99d618f2be2c89ef326b07d86f9737984a1a129a76ad98c589b45d7efd87
-
/data/user/0/com.htsoft.app.superbattery/app_webview/Web DataFilesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
/data/user/0/com.htsoft.app.superbattery/app_webview/Web Data-journalFilesize
1KB
MD57556904d1c90edeb8ee6820353eca3f8
SHA15c350d3a0b6c86379af5ab48ad4e66b9f73c5606
SHA256c3d72a55c0c3be2b64a2cca2df278b5c910834b75db498119e4943e3db5d8f74
SHA51264aa5e49e183956c1ae6e31b65bfa97938210d54666e3a70cc4f3c500dd6aaadf3574255de96bdb93af271fe1802beeab73083cec48ed9c201ef361b1fab8d4f
-
/data/user/0/com.htsoft.app.superbattery/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/app_webview/metrics_guidFilesize
36B
MD5ddcf6547e66c2065ca646afa9b7d22c8
SHA100e80d5933a37b4521bb037a199b59445cc88606
SHA2561bcc327cb810f28060f7d96867ac33b68e97112309d4637730529d8283332973
SHA512eb97acca6cbe71112734b4a581dbcfa66e24981cf3a1d945536b51e2aad98d051623b2697c344486ab5fe2b5f04798bc07c383778df4b7bd310c8e7551cb2ea4
-
/data/user/0/com.htsoft.app.superbattery/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/cache/WebView/Crashpad/settings.datFilesize
40B
MD55c73a491d53b144b641dfdc2e5313a65
SHA12eb58d22a247fa87d26dc4c065fa0a41b3b1e118
SHA2561e7515746aea7ba5fef00bcdb8b95ec6344cb16c2f66f773e682fad1c4a56f52
SHA5127b4b17a61563eae6eb79b5ee86523314109bc956b3d76e087fd742e775c1550ce49ea78d2aa23a48deae41c3e85cc9f9bfdcccfbbe040ab10bc491d8bddfe353
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/2b218c6b2723743e_0Filesize
596B
MD58f2ba4019c9469731954579d1e99d43d
SHA19019bc8e05bd336b08c358cbedde277afbd47aa1
SHA2562f5eabf068dbf5888d21c2d6b6a1fa7951bd76e077ac0b3151b4e7dcc1c808dc
SHA512e7cd053b0f119e8c3dacd1e9075111b80bb6e5d14c662f08469ca966589381c6b784701cc89144ab735ad70682d9f39f0e776dfb78328e12e3793476b0f65ecc
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/2bbc8b97aa8ccc58_0Filesize
598B
MD5c3408a3be139078462ff4681e018ea07
SHA1d4688526b82851ad5b20d30a54fa0fccef952245
SHA25691bf17e23e6088b16488d85d8856f1bb21ef98bea68de4071458fa7ab8b53a18
SHA512d3685c13f226dfb11f8960f8a4942009443b0fe76133df138ac16a40570064b07636b95afdd5ef771ec580998a18e5799dec83641c55a5c012454c52001fe950
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/Code Cache/js/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexFilesize
96B
MD5adae2058b1ae78b6a7fa93dd553610ac
SHA1ce2b3dd545e8a4a060831bc56c36eb47aab024cc
SHA2566f10dcd439262f5d37f258497967aaa552936ee9b7f73a1659cc916f6c75099f
SHA512389d1d7098df5492e33416a11240698e122799c182a5c6724a58fd76346dfde318087c136bbe86fe6745e90fdfec2fc8363522bcc35dca6f1457abb632260c65
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
144B
MD5ceeb1ea6f74289a8e39b4545c1f64894
SHA16482cdb457786a5de66ba7c893941607c9c24b66
SHA256e33468d9b000750215119ecb488cf6261d08223fc9373c5445b06fbc7e37f07a
SHA512c4c3a11f2c07d33c2c474a6004dacd1dfbc22bbc0359c7ad4c45d7c501694a8e29fc85fc1c95f151e5826c8a8ba0f4426d42a1facbc0ab55e5725e19b18e7ce6
-
/data/user/0/com.htsoft.app.superbattery/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
96B
MD595c1acc5aaa8c1fcb60edad072fcff44
SHA116b2332072c4635f3d3bada6b9e2416510790f34
SHA256cd2dc4396302ba18d5dd0bfe32689426971ad17088ecd970b09a4a9ac7545e6b
SHA5126d78c843e62181c3abb960e963f7adf036c8b5f0b5e20c7e27d636cbb999404ca1d7aa8fe4ac232d24fe5214d8f36d9c717663e938e6870adbc59821dda4c4ee
-
/data/user/0/com.htsoft.app.superbattery/databases/bugly_db_Filesize
248KB
MD5e4ad5fa639a00b9020d66c63127b7a05
SHA1ef123d47a7c3ec028b09396af094231b3f770ff0
SHA256e8862bc286cec96ad72743c58236ac7ec46686cff879ddaa34439b37462e006b
SHA5120a0edc0457789054d00d2d376922f0d8b56a4eae704ccc6cc5e84f9757823de7cb01e01787d52bdd7f1945adf76aad5e8a3d31a9584eb70d0ef8563881bebc11
-
/data/user/0/com.htsoft.app.superbattery/databases/bugly_db_-journalFilesize
1KB
MD5e7d8f41706e7239b5ffdecb72f5b3675
SHA1b975704a79876b47b2a7494f14f3f8d528b1c5fc
SHA256e08f1c688db113d5336ebb835d603686ba07753f66ef4ad15d7d98aaaedab9ef
SHA512f4ff04d2355cf6f551df22298168a998434143ffeae398dee2a71efe27694388bb2d0837be645b0621741fd2cc36a08edcae6f52872fcef350e8125e42e40ed5
-
/data/user/0/com.htsoft.app.superbattery/files/local_crash_lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/files/local_crash_lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/files/oat/target.dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/files/target.dexFilesize
18KB
MD5930b39b74861ba7b92dc5717de9c0a4a
SHA1afde7b5df081abbbae834e9ce020f75c0222810c
SHA256aa6d17e211b49eda8e37e430ece75423f154f80e102c6035d1d0b4d48c58633c
SHA512318463752b7660deb4bdde39f9a395382252175ee5a6f5f22836654e982a951158677ccaa2a7c1b28c4fb6239400929d5dc478f4e6419ac2298b59e2c3b70818
-
/data/user/0/com.htsoft.app.superbattery/files/target.dexFilesize
36KB
MD5b466b2b7ab54b23f39977b539642b5c5
SHA1ae194b47e96a26595fdc65ac8d15058c29736d67
SHA25680e538612d46cd1b1b175e9ca0d69b885464aa4f9cc5c558751014560db34e76
SHA5129c21300240112cfad31aa78866a7510fb694ad7e5ec420fdf58627fea019fa320af792ec04c9a4a316fa4067a413e18e8e69dea93ce078b2b3c5b5072fa5ead7
-
/data/user/0/com.htsoft.app.superbattery/fileswapsdk/local/220521020852233.dexFilesize
212KB
MD545810145cc3ad08173db86cf9e4210b9
SHA1305202a7a6edea149cc16247b33a968c1fb882ec
SHA2569a1e59bcbb913c8913d0062f03595fcfe8ae505c5baccc6be0980fb706c5fd89
SHA5123aaf0420b637101643835b203953d60d1a8a4f8ead56786a1d269fcd7cad7e34fc06f021a1e9d291081070e7b0f3feb8cee42333a5cdc8b52a2532b26313b44a
-
/data/user/0/com.htsoft.app.superbattery/fileswapsdk/local/go.pngFilesize
152KB
MD53cee6863c91198962578124f92f9f607
SHA1a1a9f32faa97194c00a0c7f50e5b0a8d211bef50
SHA25637c067b9cb63c5c8f63b371ac5160ef71d285584ca84024ff273a94c5d7c8244
SHA51221a7c525d9b867e11a8fc28a13c30922f7c1ab049754175e3c7e77f0c1b1138d25cb2b51c149c1b7366ee7f415476351f48ad5a19580ad8c4c0d853f004b069c
-
/data/user/0/com.htsoft.app.superbattery/fileswapsdk/local/localCopy.dataFilesize
152KB
MD53cee6863c91198962578124f92f9f607
SHA1a1a9f32faa97194c00a0c7f50e5b0a8d211bef50
SHA25637c067b9cb63c5c8f63b371ac5160ef71d285584ca84024ff273a94c5d7c8244
SHA51221a7c525d9b867e11a8fc28a13c30922f7c1ab049754175e3c7e77f0c1b1138d25cb2b51c149c1b7366ee7f415476351f48ad5a19580ad8c4c0d853f004b069c
-
/data/user/0/com.htsoft.app.superbattery/fileswapsdk/local/oat/220521020852233.dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.htsoft.app.superbattery/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
-
/data/user/0/com.htsoft.app.superbattery/shared_prefs/com.htsoft.app.superbattery_preferences.xmlFilesize
129B
MD53902787de709176ece9fe328e1fe39ee
SHA16c64dce8b486f877f87cf56e5b82732a26b26fc2
SHA256d886f850cd50118b580170343ebd924f5d7f7f46429da25422b9bf27ea2b458f
SHA512125bc5645ae230e57de3503f94bf1a9bb886344f555ee4f17c47df58ec1453935125218dc8a777eec3c2c6d6b910b936b53176c9fe9d4c43ad906fb315291141
-
/storage/emulated/0/SexVideo/20220521.txtMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e