Overview

overview

7

Static

static

10

divar.apk

android-9-x86

7

divar.apk

android-10-x64

6

divar.apk

android-11-x64

7

Resubmissions

31-10-2022 16:21

221031-ttnrkaccdp 10

31-08-2022 14:05

220831-rdtlrsfcej 10

Analysis

  • max time kernel
    4097351s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    31-08-2022 14:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    divar.apk

  • Size

    2.3MB

  • MD5

    9082147d32ce71e3da1469bd9a0cdff9

  • SHA1

    2db449cb6fc44b39f0e38d628c5fe72a056f35fd

  • SHA256

    cd3720fcdfb015b745e1a560ce5f4ed198d5a8afe79c0cf7bdecb7c47e33455e

  • SHA512

    26e536bbfc943e4a71e3dc4201fdd19a54274974171e46902d4d55261267dc2b767bf5da0966e1988488a3d092ce558dd85ebb93adb9d70359eb1df59ad7c25a

  • SSDEEP

    49152:A/Yyeit+zalch6z5Oz2vpqLwR6L2zsq7IlVCxd0qAnibUO74kg:OYyeit+za+2chLU6L19lw0qDUO+

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
    • Acquires the wake lock.
    PID:4648
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4699

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.psiphon3/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports
      Filesize

      168KB

      MD5

      919244158b44065cf4518b001c1c1204

      SHA1

      e3a2f7b91e8bb33959d8df6a42cea8ff5e807cca

      SHA256

      99a91556e5c92260c07d6cf54d015feee644235600600e51a71e5a763303af4b

      SHA512

      2e78c0f7718cb1b47f25e9a275078d39a707085ef82e2a9d93ac150c463ca9903df8ebc66d4878559df14bb543906352373c13bf47db560810496999121cb083

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports-journal
      Filesize

      1KB

      MD5

      629f41a1a4fe2189718fcf70e2982f88

      SHA1

      44e71a498e0182109ff92fc2eb88b4cd16300946

      SHA256

      a7301e036e4ca27e8cf8efb70925bc7a0857b226639d387afbcc665370a6f75a

      SHA512

      0385c2450c1c1317288173abfc1c4d55634a4aefeed627572dae7207a3e7ef15734ccfc7ae7592b3f55c31f9d768a47c685a972b5e4712f68f3c7fc367506cf7

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      491a7f91aa890764e2a2546ad56e0acd

      SHA1

      b82e7351be3b37d0b758aae0c0e9659b86d160e1

      SHA256

      860847f39c7963f17b39eab39511fa7aba14be68c6e5c1901ce6327413931680

      SHA512

      3657dc4a2daf6f8b7cc3844a2a6068363250d84ebbe5af1af291b11075911acaf53659665f3c8dd107d9529d0d87428d3174e5040996ae44a8d620b4158026c4

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      dc5a12b78e5fce92f55b8155485bbd1b

      SHA1

      abafeac8b27f5a396637307645aba13c77bce752

      SHA256

      fdfaf96aea9477e43ccce29f8c140917d28f9e724b214a9c1f71c1ed814678e7

      SHA512

      5acfc60e499ad3b17d754c31a7b172e26912afd591f901e86f461547922a3b8cccd328cd480d7617d49883c45e08727580fec66046eea688fb85a4c15a72e9a0

      Download Submit

    • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_send_report_to_server.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_write_report_to_sqlite.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.psiphon3/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      de89d9e1fbdffb752617167047fce748

      SHA1

      ae4be39ba2c0d1127c591bb22f187fdb15ce73e7

      SHA256

      11e951a03a5519251a7d6945d14a674a10248185ae0e38f8101f0aa657d8e9f7

      SHA512

      ed1a89114665d4b04cc4d90160ed4c0c107d817f5a787bb1b9f3958a78002d76b3356e4a0be12ea6ad3fb10f956e628eaf6b4225389785358a0b09c0949fbba4

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      7382f9a3666551d5157a3a5ef15a5596

      SHA1

      77adeb7740a62febd6bc156b1dbd741e9c68316a

      SHA256

      47792ba69d38706111b5a6d7d45973765f05fe7240721b7558b295c9659ee30f

      SHA512

      5f31d9504c58c9c3d8c650ade89255e8e45bafedaa0313eadcd79c4039e3dcbfdf21a3f6b2006a4399569959b0d82142ae9c8ea17a241d9f97c38acc82c939a6

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      521B

      MD5

      bb7f26866bf2086a7d6ead72ca498275

      SHA1

      65ca215b33ecd7808db26b1979f1364b245f8fb4

      SHA256

      706ff99967bb4f6741a0df6b963abd5a0813cdfeb869a8a8a1a67335121b0f92

      SHA512

      380a8d25fe094bfc2535ca3e66cbe24aa780a0c7e658526540fc419e28192981d4d92e4e666cf6b4768ec27ab2778c711fb965c6918104447d4d13ab602fcfb5

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      361B

      MD5

      4876ade7ff6fd345ea8edd5c41c4c8f9

      SHA1

      aae4889527106ad607b492902bd3ef4da1bcd9c6

      SHA256

      9b82c128cd86bf85b830369572aeb4da07197b702dc71bb2e5e170e4073e7901

      SHA512

      57d1556f169a5fca4526c4deeb451f91d099d5a2c6f7d31814d4a69080cff2dd4635abef9f689338044b731bc04ca62c9b332b4cee700d2f59a47e112ae636ae

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      457B

      MD5

      da50b004464d19910ab66b5164bc1acb

      SHA1

      47f7c6c1cb80912890260642fa58373072e7c299

      SHA256

      6a7f033db972ab9883b3d8ddfb7e0ee934d6efbbd90337fd9dccddc44ba0c6b2

      SHA512

      275e647a670c27783d628b2e2139cfb8d434769b4d289576b517fc777a673115ccd19737ca0a987226fa715f6d237c957fd324974747889ca50e9e49ca1d3e75

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      520B

      MD5

      ab2be543f87a6649bce21c76fa53b848

      SHA1

      062df287738d444ce24d4939ffae2956eecadf1f

      SHA256

      4346db79e932ae43d8710fdbf4e19825b3ab10f6bad1fc8ceb20d23972c8af78

      SHA512

      9d7ed664bfd13fe660d856f83559739830457bd0c073cf609f8841c0985044cd02e9daecf04cbc447bd9cc4735c5140a2104bc7de95557cfd2066efb7d8e09f5

      Download Submit