e329c93776c4875029b4a23d2712104da146b14d531f5ebec2dffc5784d7a1af

Resubmissions

05-07-2022 14:39

220705-r1mfzacbb9 7

Analysis

max time kernel
3473318s
max time network
75s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
05-07-2022 14:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

org.ctk.bancamovil.40063.apk
Size

74.9MB
MD5

41313191371c9ca9abf46cb0e6aa9e94
SHA1

cd6eb8fd904de59e788d2b6cc7e1cb04032135cd
SHA256

e329c93776c4875029b4a23d2712104da146b14d531f5ebec2dffc5784d7a1af
SHA512

1be08b870704894e4d001413e61edb72d37af1401332efc65e70b2cf04d20aab31b5da79f9dad10c428c5b1265bbe6a2de48a9e6be3d3d56aeb6782b87274333

Score

5^/10

evasion ransomware

Malware Config

Signatures

Removes a system notification. 1 IoCs
evasion

Processes:

org.ctk.bancamovil

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag org.ctk.bancamovil
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

org.ctk.bancamovil

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.ctk.bancamovil
Checks the presence of a debugger.
evasion

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	org.ctk.bancamovil

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.ctk.bancamovil

org.ctk.bancamovil
1⤵
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4873

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/org.ctk.bancamovil/app_webview/GPUCache/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/GPUCache/index-dir/temp-index
Filesize
48B

MD5
45e3df820ccde6256b6f7fe9804b95b4

SHA1
b284e8d20f40e19a88e53e11a4bd06a2e061029f

SHA256
9ef2153a4ea5836eb7ac795b497fabbadaed901199b0193036fe4f0d18094193

SHA512
a7d0da017946b11f53e5459741ec7d851cd0794e959d44c0057fc71be944c6786859208f7b85fbe742ea0776edd8d2a0a0115e32f1ece8194c252384ca844268

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/GPUCache/index-dir/temp-index
Filesize
48B

MD5
17d35cb9d6eec921aa5adb20d90329cf

SHA1
1a612a4690270708fcca896208f76789bf86ecee

SHA256
ecc5de42b78e5c43edd870d61730a758caa086c3871a60335dd4b9cf7830222b

SHA512
1ee38980ca6c00e047aad9a0f38e84ff0cd3c5e63d4c2de95f1d3478b5839b18dac90568f69052d9b841073da66ab487eaba0826a9b9b79624e9882a50d348d8

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/Web Data-journal
Filesize
1KB

MD5
adc2679da0cb3027e0ec4e675df1b078

SHA1
6a2978ca7701c0380e7d99ebd2d6ef59c1de733a

SHA256
1baea4ec816b709c7863835e7550d1789fd4ddb83942d36c7b8100efd766cec9

SHA512
274d6475d8efc2b05105859920654d38c8d6f9a6f417e7e7961308c5a261765990f4c2883fb0edb710ee26d5e9e268e690e40f528be4fbd3755d860e89d2be05

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/metrics_guid
Filesize
36B

MD5
8e4d48d8e906e990cd9f46b6efde5351

SHA1
f61009b61fb6adf0c3603dc1814ac73057ec9e38

SHA256
a66f284a0e71ad93da55291f42db1a70a68bc871aa4ef797495b87855e932ef1

SHA512
8fec8dccd364bf5917d1d6eaeb4725f23220b59c50f38f619cb947d4c18d4c283c20fbc4cb94602cdb8441a11f80404b6489d8be5f7c5036fd9194a685b9f0b8

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.ctk.bancamovil/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.ctk.bancamovil/cache/org.chromium.android_webview/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/org.ctk.bancamovil/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
dcb73d80fd2e00249470184fb584eef5

SHA1
b6f1558db96fa23ccd43020d1a29337c6da2ee51

SHA256
24472589f8119444cca0305b4c29dcc2eef5a832fda74173a7cc126487746c8c

SHA512
79d3e8c10a1464ccff10269c43b4a2bc11122481e2abb823df4c0d9d9775fd92647cab42dd18b0d0f487abdf0ca4d8d34c9b0db2376de4287c798d87c9029c78

Download Submit
/data/user/0/org.ctk.bancamovil/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
b78d69920a6d4a9bbaf80e909b646a34

SHA1
7576fc2f89ddcb9692e674f63cbd7dfadf6bd5b0

SHA256
72b080f0e18005d96e1d2461d117bc923741ece2b5888b249d7fef12b82848cf

SHA512
e4eb5ae71e8bdd8cbf8098852d6a63fcf83d1679a0ef2d4e97d034a86b2698d63b8b3e8f4a423e0694cc688745edec2f9d06bb5a14f45ac121425b7a3a7b5535

Download Submit
/data/user/0/org.ctk.bancamovil/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
file:///android_asset/www/plugins/cordova-plugin-badge/www/badge.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera-preview/www/CameraPreview.js

Download
file:///android_asset/www/polyfills.93e2f241d43af31d9bbc.js

Download
file:///android_asset/www/styles.40ac15ff3e73f9bd5d98.css

Download
file:///android_asset/www/polyfills.93e2f241d43af31d9bbc.js

Download
file:///android_asset/www/styles.40ac15ff3e73f9bd5d98.css

Download
file:///android_asset/www/runtime.31b2e1b040eeb59e22bc.js

Download
file:///android_asset/www/cordova.5687a8f7461b757f98c1.js

Download
file:///android_asset/www/cordova_plugins.js

Download
file:///android_asset/www/cordova_plugins.js

Download
file:///android_asset/www/plugins/com.darktalker.cordova.screenshot/www/Screenshot.js

Download
file:///android_asset/www/plugins/com-badrit-base64/www/Base64.js

Download
file:///android_asset/www/plugins/com.darktalker.cordova.screenshot/www/Screenshot.js

Download
file:///android_asset/www/plugins/com-badrit-base64/www/Base64.js

Download
file:///android_asset/www/plugins/cordova-base64-to-gallery/www/object.assign-polyfill.js

Download
file:///android_asset/www/plugins/cordova-base64-to-gallery/www/base64ToGallery.js

Download
file:///android_asset/www/plugins/cordova-base64-to-gallery/www/object.assign-polyfill.js

Download
file:///android_asset/www/plugins/cordova-base64-to-gallery/www/base64ToGallery.js

Download
file:///android_asset/www/plugins/cordova-clipboard/www/clipboard.js

Download
file:///android_asset/www/plugins/cordova-clipboard/www/clipboard.js

Download
file:///android_asset/www/plugins/cordova-plugin-appavailability/www/AppAvailability.js

Download
file:///android_asset/www/plugins/cordova-plugin-appavailability/www/AppAvailability.js

Download
file:///android_asset/www/plugins/cordova-plugin-android-permissions/www/permissions.js

Download
file:///android_asset/www/plugins/cordova-plugin-badge/www/badge.js

Download
file:///android_asset/www/plugins/cordova-plugin-android-permissions/www/permissions.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraConstants.js

Download
file:///android_asset/www/runtime.31b2e1b040eeb59e22bc.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraConstants.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraPopoverOptions.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraPopoverOptions.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraPopoverHandle.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/CameraPopoverHandle.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/Camera.js

Download
file:///android_asset/www/cordova.5687a8f7461b757f98c1.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera/www/Camera.js

Download
file:///android_asset/www/plugins/cordova-plugin-chooser/www/chooser.js

Download
file:///android_asset/www/plugins/cordova-plugin-camera-preview/www/CameraPreview.js

Download
file:///android_asset/www/index.html

Download
file:///android_asset/www/plugins/cordova-plugin-chooser/www/chooser.js

Download
file:///android_asset/www/plugins/cordova-plugin-device/www/device.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/DirectoryEntry.js

Download
file:///android_asset/www/plugins/cordova-plugin-device/www/device.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/DirectoryEntry.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/DirectoryReader.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/DirectoryReader.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/File.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/Entry.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/File.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileEntry.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileEntry.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/Entry.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileError.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileError.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileSystem.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileReader.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileSystem.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileUploadOptions.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileUploadOptions.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileUploadResult.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileUploadResult.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileWriter.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileReader.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/Flags.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/Flags.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/LocalFileSystem.js

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/LocalFileSystem.js

Download
file:///android_asset/www/index.html

Download
file:///android_asset/www/plugins/cordova-plugin-file/www/FileWriter.js

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads