Analysis
-
max time kernel
3264714s -
max time network
134s -
platform
android_x64 -
resource
android-x64-20220621-en -
submitted
03-07-2022 05:11
Static task
static1
Behavioral task
behavioral1
Sample
3cd3be87d40527570990878436a0356c46ea0ce7c4d7a6b499a22bad56672ebf.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
3cd3be87d40527570990878436a0356c46ea0ce7c4d7a6b499a22bad56672ebf.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
3cd3be87d40527570990878436a0356c46ea0ce7c4d7a6b499a22bad56672ebf.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
3cd3be87d40527570990878436a0356c46ea0ce7c4d7a6b499a22bad56672ebf.apk
-
Size
2.9MB
-
MD5
b7a79e295f23fb51105282797d05d8f7
-
SHA1
1de4a6a4395a45d6c1ec1c67cd27720ae9708034
-
SHA256
3cd3be87d40527570990878436a0356c46ea0ce7c4d7a6b499a22bad56672ebf
-
SHA512
766bbe6b46122f317dd0f7ccf2fb6f881dcb8967fc8b22e7338adf36868c2d3a3831a04667b1a06334e5ad1f529fa470546d17c98cdb33e7caebc702b38b3820
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.thunkable.android.waqardogar588.Let_The_Funioc pid process /data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/1582435991586.jar 5446 com.thunkable.android.waqardogar588.Let_The_Fun -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.thunkable.android.waqardogar588.Let_The_Fundescription ioc process Framework API call javax.crypto.Cipher.doFinal com.thunkable.android.waqardogar588.Let_The_Fun
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/CookiesFilesize
64KB
MD59b23e6a88d5a95f155f205cb04b93cd0
SHA1b62dccbbef087a0731f226b96d15d35d8aa5e5fc
SHA256f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
SHA512bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/Cookies-journalFilesize
1KB
MD5358f5401f863ad88df62a425407ce2a2
SHA1deca8cdf9fd503dc382b9c598af7508b7e706127
SHA2566cfab7c3afc68127e4b2bb302db56c7c2da6898eea1128be2a0596808e8e1701
SHA512bbcaa804cafab9d8093c9818cbb365f0de2591e10af59573cc5ac6da9b10639dfc5e19c71a20520247c2ae37d4d4d064df3a01c6c73bbc8c51681d7668fa635a
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/GPUCache/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/GPUCache/index-dir/temp-indexFilesize
96B
MD547f1ae7a01f1ff4f21eaaa7770c6fe8f
SHA11189ddf82e6c8199efdc257614ec7f616cd0c3df
SHA256c6845b919dcc947cccdf7aa471b34db92f0c30ff8b102392f8b956b4e9773a05
SHA51239711a046eacf365179d5f58e5aae7a60daab43f29774e4e01837407523605d0aae21959369c7b8e84a745001120c5dcd59d05579b1bf68a4bed19bb48cdfda4
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/Web DataFilesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/Web Data-journalFilesize
1KB
MD5d5fca9bed875ceeeb788d02e100e205e
SHA17638fecd55cfd621431c1fc16f598de92b00798a
SHA25632ad3ebf19dadbbf2647b3a1055ef56a94fea6f4b60b95f67f1ecc18880778ec
SHA512d09fb5459b6089fa3e0ea05ccc9765e40a9e2e0aa6c431aa471417c2395a8f30f3e0bc5e1e4d7b72751219d2dcb0a923be8d039751028c05591b8e2d65be654e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/metrics_guidFilesize
36B
MD5679acd97c670b6b53ccb908a7371c110
SHA1962772ffc6e42c7c088067c62ee3ff6f8d9f72b2
SHA256740d2f3d4960e1c4bb7a2c24c47a46a1224695747fc3dccd2eac50a255ad066a
SHA51258a81d989db6b38771e38f8c04c268d5842106c622a35959d59b9155922daa5dc283bb2209891ae32241af62716c3acab3cd94f80fc7e4a1956822ed2c34b75e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/1582435991586.jarMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/1582435991586.jarFilesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/WebView/Crashpad/settings.datFilesize
40B
MD5c18406a9d406950c9a08d0ee3d46588b
SHA1cb2b18932e8f588ae870f54a7baf981526751e82
SHA2567acd490c2b5bafd04bdcf000177744b2dca27a58d9660e840c44dd9889e8b31b
SHA512feff8a816d4d2af40359b5525ece2d41054349a0adbf6858c3bfefb86069a705098e3afd940a01e6285702b597f564d28917dd12b06473c027790b07907c6117
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/oat/1582435991586.jar.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/Code Cache/js/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexFilesize
96B
MD5ef8c23ea97a415e6088149bdbd9a502f
SHA18701f61bf1d44b2f6ffeb7ab55296d514822ff12
SHA256b06e9188d4d45179a3c533915a27f3702bc0e269579f5a49267e098a23706512
SHA512e764820c635482bc8beadcb8efbf59f549e645f10c6d4dd06560a35ab0e6e68e72c84b4a0429be652c77b5889e3336a80d93cf7f14e0d69bfcf4d3b006be3a79
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/f038e94cb33282ab_0Filesize
240B
MD5b8d3e0eb780205daad62bdd67138ee0b
SHA1c49591a422fc062ab7932978636c96e301f056e0
SHA25631a78f31291acea4db513ebf114e76c410ab3d1fd2f177ea196b1ab4c3442ca3
SHA512c475af0ecaf4975c2abade100e83a34d7259ca74f28eca81950c093b65af0159fcb97f161a5d7c3a206c1b843606905efa8b00f4655f0433807f017249dcb7d9
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
96B
MD5ad0dcbb20e1be4de2838c595b25936b5
SHA1e4ee0d8ad46e20286830feab0306a37d592c5109
SHA256bbabc06de9f3994aa9c0a12a5cb83e3cc8f4f0e34502da24b262468f7b667537
SHA5122f5db5fb1628f01116d4a66c7b9e2890420c31c9d844970129039669ef3ced815a903a61cdc8f7bac74c4fdd9eb2dd99bfe308666a4934be028948ebef501f0d
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
144B
MD5059ff7edb8583e7292e7a172c3b8207f
SHA153d2fdfa232305ebd93a6e841e2a1afc0d9881be
SHA256de169ed426031485e996fce4e25345037001159ace6c317180c6798755db3ad5
SHA512bfd43990b741506fa65ab5b411d7626f0607092538dbfba7561ddf245bb2cdd69397c4ce909b70f5b9dacf63c263df4fac67816aa8efaa59aeb4c9e798a4c689
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/databases/com.amplitude.apiFilesize
112KB
MD5c579ea23fc7394fd2a575260d2d608bb
SHA1c0db6d86989975f768c8abe21cc67d04d74e84c5
SHA256a5408ae1cb75a5fbc725c84f0ad18456defb09c76793c9913aeb2d7ffa59ea7c
SHA512e8b3c629823535f6faf00560b0bb47bb5068628ceb2319fe05e70d658747e77e8efb66de6c21b02c41ae900b4cd7ef1904329808b0323ab90e0ba4990332dcda
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/databases/com.amplitude.api-journalFilesize
1KB
MD5b85f2961d09da83820d06757fc2625a5
SHA1954d2726f4e9d74e7b9f0a7febe9f99a88c033e5
SHA256c954263c07fda208c9744a238f4cac7cf039acef5e5d3eec521009d1ae420e94
SHA512520f99e9304f12f3d29679a51f69c9df18159eabd613e8a771313758633c3620523c7ab76a199a7d6dae7ff37b9a0e78e1ff851eef699d84ec01be4ac0c96e79
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/62C12CC701E7-0001-1546-55E7FF274D86BeginSession.cls_tempFilesize
79B
MD5f380b7c1316df3b51cb8b01ba9c7d46c
SHA14a04d9f4a472ade89d634eb2f2833d428c6768bf
SHA256f8f6616d503c7b66bfdd9d587a248db6a44446d0b92188d153f2bd8fdfd171c5
SHA512f0cf280bb5085b1e1d2b439b79e0abeedac493dd31ab816e47fdb5058c80611c199a6731e290a1699698bec923d8a98fb910876d93390be49982e2c9549cb548
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/62C12CC701E7-0001-1546-55E7FF274D86SessionApp.cls_tempFilesize
110B
MD577846ca82f02680c53e9d7e43f6ebb0a
SHA1f07f75a918042a501e9d22f231a858f02ef13bd7
SHA256dcd1434b499150cb8ae7ef541b6a135d2e21b3b4de829a81344b7c30d6e83942
SHA5125bbb48ffe7fe0954a16adbe9fdb1bcd0af596a1dbd97732efc0fa78ee3414d444266077fbdebfe8c731e547ba485318ea4d5d98cfd979490541d7babe6f46515
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/62C12CC701E7-0001-1546-55E7FF274D86SessionDevice.cls_tempMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/62C12CC701E7-0001-1546-55E7FF274D86SessionOS.cls_tempFilesize
15B
MD52566d27ce8c28d8961f082c375d7535e
SHA192fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA2565acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA5121c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/shared_prefs/admob.xmlFilesize
133B
MD58a2fe1d84f0f826666c1fe599045ccf4
SHA1f7c30bcb953062a6d106d7c961cd37352a7aca4e
SHA2560255e4c70081fc1f6c277086705a155dd2fef4986b09a58a251f40011fd2be21
SHA5121307ba6a10c5d23a7062e005c9bfc6eac25eccb130dc5c8c66561b0bb4755def63e70f9e4096406152634d20cbe91bd51eaf125ae0343944cd90f0736f55c00b
-
/data/user/0/com.thunkable.android.waqardogar588.Let_The_Fun/shared_prefs/com.amplitude.api.com.thunkable.android.waqardogar588.Let_The_Fun.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03