Analysis

  • max time kernel
    3826225s
  • max time network
    136s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 00:24

General

  • Target

    29b06361a77a2915bc5143fdc049e885c0e83fe10b69e3949e5187430040a724.apk

  • Size

    17.7MB

  • MD5

    6d5838ff5d872c8cae782a9282f89e9b

  • SHA1

    eb97dce0c43c29533fcebd01ac589402248ed4d5

  • SHA256

    29b06361a77a2915bc5143fdc049e885c0e83fe10b69e3949e5187430040a724

  • SHA512

    b69ae8b40d1d5eed184bef2268b2554c7eb97bb9b0ea726ab9f78ed577520b2b4b8202859959ca60afcd2e430ae1cbbca8974fc66489638f163f2f20aa5bac25

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.banca.vngdemo123
    1⤵
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5385

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.banca.vngdemo123/app_fiverocks/events2
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.banca.vngdemo123/app_fiverocks/events2-journal
    Filesize

    524B

    MD5

    85ab1f369b01d476390f8409b378af5e

    SHA1

    1f74607cc234285d3ffe52bd5b43246ee9edb066

    SHA256

    2c06ebdf430758362192d91f3d8f88be7dca60361a6989c0a468d1db8e853bf0

    SHA512

    8c161ea93e37354604ae590d028950bf9d31024a4b7025d9e2acd0207355613df9744149c02a0ba74f04188f6fecfbe0ba3064fc0f6262aaa301a276599feb4d

  • /data/user/0/com.banca.vngdemo123/app_fiverocks/events2-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.banca.vngdemo123/app_fiverocks/events2-wal
    Filesize

    36KB

    MD5

    e48a9ff26371b24e29b1edbd49949609

    SHA1

    335fff417e467c2dedfbc1daeebe64f8b1c44292

    SHA256

    aa4f85997a9159258a49b4a9ccb9a00bc72b5f260670bb8db2aba990c3938107

    SHA512

    4b3ebc5d02080145b51db17f60d829f79f856d60129456304f838a1db5c3c1ecaf572cdd851d2573de0f110509ac767b1546aab572973d075f14851a788e7a0f

  • /data/user/0/com.banca.vngdemo123/app_fiverocks/install
    Filesize

    36B

    MD5

    2b9e9b46d3607ecaba55d4c53bfe31a0

    SHA1

    cd571a108e5c150d460df0965b759eae0273a9e7

    SHA256

    bde5e80fe599a3775ae14d310ec2348868e8c07a586d2b48e0f45ffc72da5417

    SHA512

    394b02537370d7b5ee639f03b990b6d98ba9fa1b424a22aac9d316b75be40cd906054dcfc332ebb1b705fee655550585b8eae394ffb98d514cf8fa507b3436ff

  • /data/user/0/com.banca.vngdemo123/app_webview/Cookies
    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

  • /data/user/0/com.banca.vngdemo123/app_webview/Cookies-journal
    Filesize

    1KB

    MD5

    643dd6a9c55646adb85acf5de22e14b8

    SHA1

    d8be036b60889ddc8042713edd392ab4e3a400c0

    SHA256

    a9153cf08e9a5ac7aac4d8e62e9430be362cecd97299fee5c0f13d901ed34b4c

    SHA512

    e8642bd7d0f319544441251c47a6b9051a7f09998e2d0ef34dfbf7603edf1822910e1d4466314891a0ae87856ace94fb216056d81a99797088ecf492eaafacd6

  • /data/user/0/com.banca.vngdemo123/app_webview/GPUCache/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.banca.vngdemo123/app_webview/GPUCache/index-dir/temp-index
    Filesize

    48B

    MD5

    07ff8b63c2e3e2e60489914cc6123241

    SHA1

    1caeb1f393b314edf1a9404c775cf9e75f731fd3

    SHA256

    9f6432ff1fd977aab1c27b2849daa4b9a63a5b6e4d956a291cd02bbb47f1a66f

    SHA512

    810001bef6c29dda31770b3e9e8e95acf3e206437f64ec0d02b9899d7842e6a295534503b9dad58d60e1c413ece16835b03141e40ea73f82e08ab3f4a1ca8457

  • /data/user/0/com.banca.vngdemo123/app_webview/Web Data
    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.banca.vngdemo123/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    3892ec1ef7fc60d1d4aeb8e06411aec4

    SHA1

    28fce1a78a01637989f851046c3c3ba3fce22731

    SHA256

    834daac2cf96ed018133b94d89bd9427c0f6ca99f6d5da0bd59a98bd43eb4daa

    SHA512

    0699188568ca6632eb0ce72cefabf64f70dd314d511777ae7252e6211ee35369b98c667299e0d73e833ac054f4e3baa8a1d5939887274bf01e8962a4685401ba

  • /data/user/0/com.banca.vngdemo123/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.banca.vngdemo123/app_webview/metrics_guid
    Filesize

    36B

    MD5

    99d88834122999960b06e2bcd0755c69

    SHA1

    379d8ee85537a9a56941bee9bd6f2d79009cbbc8

    SHA256

    5a04bed22dac40698648d2a8769a32d20ac63320e8d73dd5e4a005b3e48d14b7

    SHA512

    2dcb0338b90bd2a9983b3dad7d80db4e57f2e10c951a56ae442f110c36fa0eb7985f3379b350a49d02740b08368ba0e4422e2ad18f7cbec9c570e749e2e0080e

  • /data/user/0/com.banca.vngdemo123/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.banca.vngdemo123/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.banca.vngdemo123/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/1e414e81074cf81a_0
    Filesize

    5KB

    MD5

    d0c8c3132e37b64dcc982a7e2403045e

    SHA1

    9b25afb04e4996fc02987ef43957b5730189f6a8

    SHA256

    ecc819a0eb6b8077fe54356f8c64b243bd27d06c48a5b3ef69534dd9afe65431

    SHA512

    12ba4ca99819089f9568d3d1390a90018a69b9efc0d40456945000de3bc2e7815987fc3637aebb37192d5d5b2c555ee19fde9046b92f29c923155f0807a7e4d5

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/325443351d4161d5_0
    Filesize

    19KB

    MD5

    125c76726347238e8f9d40d2e0fbd71e

    SHA1

    15897b625e2d95b0b2eb905d52f75f356f7b3c03

    SHA256

    cd3dbd638c509fae4cd10f697f6952cb6cdb8373e1899a3577891f5f148cb456

    SHA512

    1e6b17a44410c2470410f68517e7b586d42686ed21236b8822ea524836e166648aa3ddb6c07e905fbb9c6d02c81780a553557cde29c4306f0fbe633a435bada3

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/325443351d4161d5_1
    Filesize

    169B

    MD5

    ed513d56aede1bb8d121385502b8957c

    SHA1

    5f8cf5b211bcf209ff67a92ca35df4a04701f412

    SHA256

    36b7626d22d2febe77ba57ac87ddec374426ab605173dbe1bf565ea0c5b16b55

    SHA512

    269795d8f9fb9b782df830009f7963b8e8ef2cbe480c44d054fa43cf13ddad6866454c6375f7b4dce292eb1791356c7598f1b1add0383c965922878158805489

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/4c8b7fd25b13ae33_0
    Filesize

    6KB

    MD5

    def002378e18ef8092ec3fed6f7bd7f9

    SHA1

    b02b9b717514af5854ecb1d9bd2102b9c3c35e77

    SHA256

    7be44bb1c8c420276c99b39ee08482f24e2eaff5b7556744bc32a5c12f090da4

    SHA512

    e12732fb8ee2248f17891795559ada541a9b30cd48265733faf1c9fc1bca593853c9b8af3dd5cbcac9a873bd236afec4d58b3672ae16283085338a2a4fa0fd2a

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/596025bf5194657b_0
    Filesize

    4KB

    MD5

    74d182607585e3f798a6bf16c4fe3e7c

    SHA1

    6396021418676fa726a541ea541d9e26683ad369

    SHA256

    003f0efccf5ecc56578e45d8597707eeed4152e5f195acd068e9cfd4bd5bd308

    SHA512

    6fbaed3c4a2255603dd7aa8bd09703002cbca9f52d8bf407818c4d921e66979768ecbf9d52f4f13d1510d7cce5fc60a911b8cb7df80648b4d0c3ed5971b02836

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/596025bf5194657b_1
    Filesize

    179B

    MD5

    7cf412eb13b09a817bccc18d2d7609db

    SHA1

    7644c4661d9193a4f8e4f080bc3cfde8fa8bcf2d

    SHA256

    245f19c17a6cd93e2d969ce872bbac97dff9adb6c09785ca6910bc6612e6775c

    SHA512

    2475dfe823a27fcb1d174873c8fbb122f9f6625cbb2f85449c567f1004589565243059fb6539ff7e953af70ffbd96bde546013063bdbefaf163e275068e19a28

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    48B

    MD5

    b8b6dc85d4336143e7330a5d5170c370

    SHA1

    3d8f6f9a13a93c3736e7c19a3874a9ad7a515414

    SHA256

    5b521484781cdbf335132cefd95cdac35a45d662b5e149e9ec7a9bd234cc830b

    SHA512

    950cc30592c0bc708e081878f129176ffb6cc2f082eda33191ac29c32bf08ad14dd58bd538de1df5ae8edfa6197deaa6c15ccaf2c43ba99a5ae6e55206f78f63

  • /data/user/0/com.banca.vngdemo123/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    144B

    MD5

    096f2b35ea66d245a58a07c113986297

    SHA1

    c85e1d368d367a4e472e5c61dc026bfc88ad09f2

    SHA256

    0a64b8b322d09732bfc6fb5873f4bf497fb04a6bba38816c177f3dac6980575c

    SHA512

    b6100703ac0b18f2508cec37343ed9abfacfeccff2b0341fdaf3b883eb0ff561907accebcdd3fc800eda1ddc2ceb01b29e9edf3b43daadff7a813b53cc1062c2

  • /data/user/0/com.banca.vngdemo123/databases/fishrecord.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.banca.vngdemo123/databases/fishrecord.db-journal
    Filesize

    524B

    MD5

    515dd8cd7f72eba72e7519c8395b7d06

    SHA1

    398c2684392151e77179792d8d125fea708bc140

    SHA256

    05968b141170bf6d6f9ca94cb7b3003b39f08f54d5dc6cb89563ca6e0efe7248

    SHA512

    8a112d1a46d7fca5c3cd5a46daf36e1fe9718c33e05e5835c526b409206190c6b4c4a4cb0e31401763430ad1963698e9eabeae1c61146d2d4652b56ba84867de

  • /data/user/0/com.banca.vngdemo123/databases/fishrecord.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.banca.vngdemo123/databases/fishrecord.db-wal
    Filesize

    32KB

    MD5

    8c3c3bf76307f16843be1aa50a278100

    SHA1

    83e6461d9afc8dfb693de902fa9685513f676b3a

    SHA256

    6933e1ccd265d5eff2d31ea3b6eb1812ba811b258763043fdbd83578babc5982

    SHA512

    bc34f2613c2df888fce3fd22fbc1127e66fd2918b15e3013c49319b2e7dd347d2d010e6e26fd534f622a4f796ed4fa418c64eab448d7d9f92d14f1a80a929e41

  • /data/user/0/com.banca.vngdemo123/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48