Resubmissions

08-11-2022 11:36

221108-nqkmvagabm 10

26-08-2022 06:04

220826-gssb5shce5 8

15-11-2021 10:12

211115-l8nfcahha8 7

12-11-2021 16:55

211112-ve7rkaahck 7

12-11-2021 15:17

211112-sn192adfg8 7

Analysis

  • max time kernel
    3636668s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    26-08-2022 06:04

General

  • Target

    BEE3FC6B875E49EDAA983EF9D38D0BCAFE82ABCA82E684EF4FDCA6DF0C695C8B.apk

  • Size

    4.2MB

  • MD5

    9b7de37409f92e43d800c81a192fddee

  • SHA1

    2ba54a6fa514ef38b12358ba5a06b55522faf020

  • SHA256

    bee3fc6b875e49edaa983ef9d38d0bcafe82abca82e684ef4fdca6df0c695c8b

  • SHA512

    91e4b360bc32441a96ebfba986613fb3cb82ea9adcbfb6b7cd29ca02d72b1081a1773f2b1ab15c11ce6654e9b56d78196e832e92d231124583dd51508aec9cd4

  • SSDEEP

    98304:xMlvNargDRH/zaJn4VrsIz4NyEEl6y+y1fzfrrVO:6NargN/zaJ4Vruw5t1A

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5262
  • com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo:BackgroundService
    1⤵
      PID:5354

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/.com.google.Chrome.9WyGjZ

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/Cookies

      Filesize

      64KB

      MD5

      9b23e6a88d5a95f155f205cb04b93cd0

      SHA1

      b62dccbbef087a0731f226b96d15d35d8aa5e5fc

      SHA256

      f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

      SHA512

      bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/Cookies-journal

      Filesize

      1KB

      MD5

      e54856902dfe6f28694e5936651d7f94

      SHA1

      6bdb29559db63571a783dd70783a38de934a2066

      SHA256

      110ecbaaa831d4a7337ea7bdb5d49d2a04fa2b450a93cac48b99f9eaa806be46

      SHA512

      25e43328807ccde23a20bc5cc82ff539521f0ef470890951145be3a4ab1e8350e74559d0461995b4f06713f4623dd4b0c7d3fcb277bfc1f3a8114d12653970ad

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      1b10b83164e66147bf3180440290a31e

      SHA1

      3d898dd06152f1d960fb0ecfd6ec3d642a96c2a5

      SHA256

      2d65b64b730a5769d906416dac3c1c0f93a8de8e631b96342302ae4fff2acf2f

      SHA512

      5818e1f1499bd644e1ca498654ba856bc0cba700a04cb8c6b300f95005d307a2695122cb702548409b3338d12cf86cb2c6357ac107dbe6fdcae427c41e07c059

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      875a889b06183fefb24fdeef7fb9f3c9

      SHA1

      ba863203073d65b35d085027272b474113dfe12c

      SHA256

      f46583fc5ea030ea1c570076aec9867060af6ffd5e856029ffd8d250fc3d8ef4

      SHA512

      56141f1f262ace52c22952d62aeaef4b8b4c9f46d7d588b7a77cda4e779d4d488bda82c5e1606ede0f43e01f1a5dd2f9968c25eb577e52cb3f73920c0f12847c

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/metrics_guid

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/metrics_guid

      Filesize

      36B

      MD5

      25fd5ee0e6b7485583f79f7fcb217350

      SHA1

      e7b46ac216b325ae56fbee36f90c31c4a240dee7

      SHA256

      30c6e34cd6b2b59e2b56ffb0b924d00effb698c60eba4eb8997551e37711efac

      SHA512

      7b92b5c5041f70587dd3c1718ea87a680197b7bc12c9c974433b7195db0f107235cd438052082a9ac01a24e1020107d70addfe255fac7eafdf26cdcb03621756

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/variations_seed_new

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/variations_stamp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/app_webview/webview_data.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      9f48acd2295657b16501c9cb1c709fdd

      SHA1

      ca254632c9635977c836658e0f9c2781f7b72e94

      SHA256

      33fe9e95762c2a9a9e33a94ef724a09d9bd2bdb0d6ff998020ddc98d20439c43

      SHA512

      3d8f5813d8dfdb0d4e37dbbeea2218544e1c839928b8bc3325d287c86430d75c4dbe5e6fea0f1d65ae7d648d2595678a6c98f5992419062b27a19c56c2744d5d

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/org.chromium.android_webview/9dfee4d9ff88acfc_0

      Filesize

      13KB

      MD5

      e99ad4c0831b6914887db91843d9d1f9

      SHA1

      df7e7a499b6f65b393e1f76363b71385fed242d0

      SHA256

      bbe74d5f0d7d64528da3227ec5e88cd7e35b8f8495e69490c8b3e5ffb22ee78d

      SHA512

      30cdd3b83dc764745013e1c4854ad018401e8901a90a47c4073150120b9546d3a605207a6f29c79bb49ee73bc70900d435ed20bd95db5c992cc720df7b4c326c

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      cfb83d9b744c9ba8faf6760cc8d723d9

      SHA1

      2926ae56e517540edd838d50e8e3bb03c6b67acc

      SHA256

      e074e5cb17b531858177131b9775f6f846f90a8ef016ab30812c58f74a593e74

      SHA512

      42d950a5b31b23a4589473d174637e16485da7b98bde523d8c3c6ab63b1b6e2e1f4c7a517eebc9f555d67959800e2df79f2811993f54a33cf522a23672f35fcf

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/org.chromium.android_webview/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/cache/org.chromium.android_webview/index-dir/temp-index

      Filesize

      96B

      MD5

      24fee067d5ebd5a0d7c7965c8698182e

      SHA1

      be731493e18d481b981483900d70b731b9e8c763

      SHA256

      a897513129d1a6c681f49f4e0c6d0ae796bbdaccde7a2d77724215d272bb0d06

      SHA512

      1489f168b22c7be5b3d4cd1c2e587bef9169c53ad31b2e84a468b1ad6977135852c052cb5192afa61c35bfd8d3580e5e95ad0fc081b3c964887f47833f690c24

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/databases/sharked.db

      Filesize

      400KB

      MD5

      ea8363fdc03cfcd42cc9a7887975dd1c

      SHA1

      bcd2a7675fd89e0998a284044d93e2264fa4f5e4

      SHA256

      f94f8f031fe9d088a71cd92f2e3cbbfa2e3e5e8f6531a286eeab00e7d33622e8

      SHA512

      80424199fe16b04790d47f6c9db5ffe009fc6b1fc05fb1b06b7b5d24bdb2435e2a0100abd966c3ca9d217f8cfa479fb16fe5ed7a2a28d2c2efe3a1738c2c010c

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/databases/sharked.db-journal

      Filesize

      1KB

      MD5

      784e2603c8d8f1f4355d337d852daef8

      SHA1

      25c1884eba73d0026ca5f7fc5271bd164e3f7cf7

      SHA256

      54657cf0a9c758ba3895ffb4d8892b912e67245582d44bef6b61bd0eb9e8222b

      SHA512

      0edf93893d2c5b4c2b34c2f4c13d6de666dc02a17d409eef1c3d3f9c3e8a68eb714fb1fe6abc8e148c13015b041019298067541133071f6ec1549b41eb059ff4

    • /data/user/0/com.tmqxfghsegbl9b3shaxdylqc.hykdpm2kjo/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9