Analysis
-
max time kernel
3866852s -
max time network
33s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 11:31
Static task
static1
Behavioral task
behavioral1
Sample
2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6.apk
-
Size
223KB
-
MD5
982f5bc28c524b250c2d462d25c647d4
-
SHA1
ea6ef03acec7293d80907d13ee0cd6046c1cf7d1
-
SHA256
2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6
-
SHA512
126ee32d4c94c38891027555d75e525bb802fa5814bdf73e0abdd7553a5b0ff53f9e389f7af6700706817adea26671477b31415bd0fdab7b43ed422a2509af51
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.system.wcrashdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.system.wcrash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.system.wcrash/databases/packHelper.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.system.wcrash/databases/packHelper.db-journalFilesize
524B
MD5e11eeafdf580bbbeba38b61730fa8a48
SHA1d7995040abf658552440bb6941a008f255d2a2ea
SHA256a80883f61a82713d84b8709abfadc18becdcddb572317e48fad56fb9119f08f8
SHA512d02b09a8e9fd4abae10182a14b5c274327ede9936795999d3bee6916438f7c598e37baa7886e27864c2f1ee1d66cd5a3b073e9182e06a21ce4690b48a484cde3
-
/data/user/0/com.system.wcrash/databases/packHelper.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.system.wcrash/databases/packHelper.db-walFilesize
40KB
MD573390e33ec9f579fb33c56210bfc98e1
SHA1b8c7e47be7b875c6d2ba79242124b1a80ed61ac2
SHA2561b606c0e5dcaf4e5bb65f5189b696234898e6ec64209fded5c6a7ee906d8f8a2
SHA512c0321102292d18c373a538143c7e2660d0da7ebe57d42226ad2efbb41f531145e891af56b78c6ab2528f279f2b0b9792dd53f9d4654654cf744d92ce5dd276fe
-
/data/user/0/com.system.wcrash/databases/timeHelper.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.system.wcrash/databases/timeHelper.db-journalFilesize
524B
MD57afb243b1625d0d508c4973373c45b4c
SHA1b09feaf98d34611285ab4f46e7a978a842fe68a9
SHA2564ce89c359035191b32da4d819e3b7939255f39a696db6ec30611308c93f1d0a0
SHA51255060ad33d06efc9aedf2cacbfb895c0fc3216ed478bfaf729e30733c5e68055caf6a4526eea1b69cada86297e857b027b6c4a3038ba9bc38c63dd9e91791e7b
-
/data/user/0/com.system.wcrash/databases/timeHelper.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.system.wcrash/databases/timeHelper.db-walFilesize
40KB
MD5c1b834c6ac6ebe77ff6dec0da8c201a4
SHA183c22e328fb7421c9eeac4658232c0e56579e698
SHA256c0f3c601ef1e7aa72a1029c671acf0d857ac918db662e547bbf13a18629090ab
SHA51292c720b3994468fc9fcf96d3bd02eafa6fa3beaf9de95776355791fa01844df2402e5dd9662b3cc66ebfcb8488515b33d6db7dfa3f54806f4c6176e7485c0007
-
/storage/emulated/0/ttan.iniMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e