Overview

overview

7

Static

static

7

d86da41bba...4e.apk

android-9-x86

7

d86da41bba...4e.apk

android-10-x64

6

d86da41bba...4e.apk

android-11-x64

7

Resubmissions

22-09-2022 17:06

220922-vml5tscab5 10

13-09-2022 03:06

220913-dl3mraeef6 7

Analysis

  • max time kernel
    886165s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • submitted
    13-09-2022 03:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e.apk

  • Size

    2.2MB

  • MD5

    c863eac37df1b80de26334d6dfce8aec

  • SHA1

    ddd76dd8e4de655d7d67aacbec36694e8e221612

  • SHA256

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e

  • SHA512

    cb376ddf558f47d92a53fd281600f2bf9ff760daf2fd53e20ceb1c941d5d3a400d8717a0588fa8676fc6a8fe4beee5d417fdc1581e587631bd3913bed0264135

  • SSDEEP

    49152:B/tI21hWuaWaTxuh0J9ZGc1d30O8xz1EUQq28I3Plb5:JtI21hWua7TxSKVwO4+598Y95

Score
7/10
evasion

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Checks Android system properties for emulator presence. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion

Processes

  • com.psiphon3
    1⤵
    • Acquires the wake lock.
    • Checks Android system properties for emulator presence.
    • Removes a system notification.
    PID:4089
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4179

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.psiphon3/app_webview/Cookies
      Filesize

      64KB

      MD5

      cb7543c4df600f2af58097cce0e334ba

      SHA1

      83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

      SHA256

      64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

      SHA512

      ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/Cookies-journal
      Filesize

      1KB

      MD5

      68b2cf827be12270ae7759647b92ad42

      SHA1

      1c1d5eb93362eb621d281fc823d55dfb78d03c15

      SHA256

      7230a2b0dd4178160fa5896648c4c38506f7efaa039188660adf20a745c7546e

      SHA512

      9b06377da19e40c08ba43e875bd1326c359a2dd556b9dd3f62ef2a38e671ef4d1444439fda4853780e6dfe249cee5feb4bceb96eea62c62a4706d410a2b9846d

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/GPUCache/index
      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/GPUCache/index-dir/temp-index
      Filesize

      48B

      MD5

      68ad88548d7f3ebf438496eb62297025

      SHA1

      aaae2b79a4e1936abb55e25503293e5903b2a3ea

      SHA256

      0cf6d3420c81810752a85ff0c4fbe884771e82d50113fca2384de7312dbafac2

      SHA512

      792458f35f1076f0f79d68b5d88f5c3ec36ac6474046c3c25e53dbb5629f5b68ff5c2cb50f99f45c81d0ad2139b1a8f148be8d36152961f87afd15f3900b3a35

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/Web Data
      Filesize

      104KB

      MD5

      dc79f9ce5f3ab5270b33e61119dfc959

      SHA1

      1844bf222a5144b513dcf2fb50a18c011701c647

      SHA256

      47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

      SHA512

      18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/Web Data-journal
      Filesize

      1KB

      MD5

      0a53e7a7ed2c482168973f3c12270c22

      SHA1

      4b20e5170795fac463cbba39504372b06a73bcbe

      SHA256

      630c82a3538d52c80bcd62c2d1ab938d92989355685b3dc8233c0229f168d33b

      SHA512

      a0f0e5ceb7ee93b4b377582405550f8fdb0f2871103b66215583d1f4ccd9f644da7f5d79998c82e210985e534765450a4740d3e6e995f18b52dead443ac34069

      Download Submit

    • /data/user/0/com.psiphon3/app_webview/metrics_guid
      Filesize

      36B

      MD5

      fa49edb3332c4ab0519870ced6d25f65

      SHA1

      ce9bee5019d6835b64e079e177632d9d49855eda

      SHA256

      2eeb736a5afa56c75afcc19747fd6cfd27a94103da6c9f93f1c4522aa666c493

      SHA512

      e0359ed42078edd1cd92ad5a07cca0164ba5e54f0b775dce4d94348cff7ccac23d9d13b6e6514f303be9cc637dfd4999dbc5c33311f0c628478f0be01cb16ee4

      Download Submit

    • /data/user/0/com.psiphon3/cache/1
      Filesize

      31B

      MD5

      8176b327eadc684a74f17a18bdae6292

      SHA1

      af5b89dead35782eb7b1466a3412c31b72240014

      SHA256

      2689052abc5526a9810fbae5d3f64ac500988559230846c0f089ad33f20b7633

      SHA512

      3071850d772c1f5ef28ff8133018cae8d59517a9674b7d941111170a9e28e38edb3e71491954f85bb30bed56a527a2dbc0e5a5b56d6bbbcec5d7f510bd46d6a8

      Download Submit

    • /data/user/0/com.psiphon3/cache/2
      Filesize

      1B

      MD5

      7215ee9c7d9dc229d2921a40e899ec5f

      SHA1

      b858cb282617fb0956d960215c8e84d1ccf909c6

      SHA256

      36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

      SHA512

      f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

      Download Submit

    • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/2e7835adde895baf_0
      Filesize

      123B

      MD5

      a9a1e697c99e773a7ad3924f3450ed38

      SHA1

      d003461679e346c8f6fdd127ad98ae3824d3c2ef

      SHA256

      241c5a0a6dad442a444b03b621a91b562e0133c19f0cb4facef60641b4151e5f

      SHA512

      5177b31a3c730f8404f17cb03fcf0e3df5667eb251350a5fe6d616d9c03e7fd4ee9ee8160a0ffda776257be070b20e42a627375d090cc4c587c428fc505c7c08

      Download Submit

    • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index
      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

      Download Submit

    • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      48B

      MD5

      0d7f039c797b8d361dfebddfd754c05b

      SHA1

      21125e8fd50e04ad9ae12a6a98d1d4dbe07ffda6

      SHA256

      530c728cd59d65104420ce8d85166662b1ee304b00407f6685871728b6a56504

      SHA512

      04995b027b742535e232bdb430b202bdaf2fde533ed48bb91f83c48f4a150c8e7030d840166c85434fb670419954f9b8f51c709d54049f68d071560938678afe

      Download Submit

    • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      48B

      MD5

      d4a43b4f631fb72c1aee9fe962d7bf26

      SHA1

      725d97db54e9a61705c3b0fd851533c2823b8b9e

      SHA256

      006e4d94c663fab147623f88d882091b4935c9fa0a5be6356464f706c09828f6

      SHA512

      59ec9c24540a13d11a0748e890d9072c7d21c8ef01f4fd1753110a77cac59edf5f3a6aa95a4deec33bdbcd4e19b94a1a38921793e810bd9cc9a90a8b4d5ae62a

      Download Submit

    • /data/user/0/com.psiphon3/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports-journal
      Filesize

      524B

      MD5

      d2d84f078e43137f25e1a0e5f9780b0f

      SHA1

      478221e353f9803777e31d29cb8bb00a8c6f756f

      SHA256

      bed0495851758fed666dc2534de9c0b3658de1693e43d5635b301859ea586652

      SHA512

      b898effaaea544661ffabece36e2e6deb8491222b707854b13ffae39e2a8ccd4c68261dfcb15a5f36c1c534983c6d326f236bdfd43425fdccbc1edb225cf24f2

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      Download Submit

    • /data/user/0/com.psiphon3/databases/crash_reports-wal
      Filesize

      60KB

      MD5

      82f6903f294d0bec5aca2cad54b4f270

      SHA1

      261959a748849007c134611f423adad4c8fed8ed

      SHA256

      c5c287421eb7f85f79aa6bc886914c6d5b8cba0f0561b83c2fa00d2bac3e4725

      SHA512

      a93638fc587dfc988afa56babd8760fea3e6853979487b06657e660d87392a91d8c14e284dfe32a4e064b3f1eb38a959d29cf9ee033da04d0b2f91c7980e44f1

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db
      Filesize

      20KB

      MD5

      9932a2dd8eb490afba6404368ddd3511

      SHA1

      ae8cf313bca5cc00576667d91836aac189fcb09a

      SHA256

      08559c7befd352a107091904eb030d9c5ad66ee5744017263974fa67d7924381

      SHA512

      f5f9a1a565dd904f1fb1df9163b79eb347d381aac7fdf5e940c6a2b5c72d27dac464a59f196a64efa85f6e7d1ad9d665f92c0f30f6eb96e22033d8266348946e

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
      Filesize

      524B

      MD5

      de2d9a474c1f7a2af6191bfc5d3633d5

      SHA1

      0f967e584a9974687814c48911d96742037b56c0

      SHA256

      ca5bbedab2ce02e2180a6fe9217c07f9fc5aab0f44ef7d795ebb109559317387

      SHA512

      ef3a83579bfe8aff6c692bf7c0ca78e60ac459b85615e85d5b0e4e3497623c4c94e5470a8b17cd7c65b4265260c754f02c00a81c61598c66052f05e42e604009

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-wal
      Filesize

      36KB

      MD5

      1e22f84e9d04e5393b96fedbb1524c26

      SHA1

      c612a2807409ce3259802de80211ebde0958849d

      SHA256

      0f4f95ef8ec44bd3e59a029848c22e170ee667888fef0ef23cfe614b7d356a83

      SHA512

      1c0c3877d48e2ec2bb5e9a0edada454a82cdf2e24d05fb5d40656ac5a9ca773954cd3d0d4552d5ea6e3f9d67b09f18c658b7f8dda2a3a0ac2f50f51764cd49f3

      Download Submit

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-wal
      Filesize

      4KB

      MD5

      4192486f75b856fa2046c572b83bea9c

      SHA1

      df333931ffd44770edbc14a36aadb402c4725f62

      SHA256

      cc1bfc127b28518585c3c94b2006e0ece64dcc391f649bdd7bc345a32a1c4911

      SHA512

      3786841fd313927738de372e57ca45bf00cf63d9f733c72f80e7bb3a94334c4693d64f98a940a5b2d75bc26442ba6d6860368a19b2b0138201cd99754cf6d6a4

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/WebViewChromiumPrefs.xml
      Filesize

      127B

      MD5

      21223e9184445fe043476484cd8cb1f9

      SHA1

      2b4813f849121d60ba35eb0889080668bb62c778

      SHA256

      bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

      SHA512

      be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      dc30857d764e1e5a1282428d5e442b70

      SHA1

      f15e505162bf978ef67375c3fa2a5460942d199c

      SHA256

      061b3bab2174728481cbaa8d18cf8bee925529a1d4cf15bcc62cd77b06eff37d

      SHA512

      ca494e9216f8db6564019c577cb46117d9da5a0754a68ecf3f8818c8229dfccee4aef79410f301d1b3a9a9a101e70950682c08f6bfd0ac2da46b7c44054a6199

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      d4ffb87859986b9462c8cc5dc2441950

      SHA1

      e3f057438ee876172039b1eb167cb5957e85d6d9

      SHA256

      37ccc720d9291804a4ee6f77804fdfb8dbeb6983dad106a90f3ee5784ec874a9

      SHA512

      729addc8e97a14d971bc13005d2f79aca0dcc83611350b59419b9ceeb320857a880c41d0fe5f321004a2f5034ec4685be0fc374d795a8d4c91183e5585fd6879

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      574f66d86098290efdc6684f56240328

      SHA1

      9c868d9b9dc781f96cd3c5f0c19dfd66a75a0418

      SHA256

      80527ac67958d9324caa0e75e567a3d5e212173cbfc71acdce735c17bbab99c1

      SHA512

      ddb571e257034d4808faaa84e8b493a9d4a6b9a63ff516a31a79493d5a50ffb609054310ea6f296d7de9719af548715e3950fb2eb5aae0ed8d2a94c5907913a1

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      f740d7dd5f6d710847047f7475da8a4b

      SHA1

      13198cc2a76fee656629fb613fa8799e5a20a7d0

      SHA256

      0bbefb6288ae6093948877ae5aa6af9e6c4de1e3fba26acf80b0162fd414cbe2

      SHA512

      aee3e8dbc35af364c17e8433ee4c65fdb868b0544cb448d7c178aafb1e5a2bb99b925f70c058ebea706c6db9822806f8f81d3dd4503388162ea32f624afcd46f

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      518B

      MD5

      a45b26732ff1795b1e4f83dcb7d314c1

      SHA1

      e1b8e8101114407bb0562266f7567d7e526cda2e

      SHA256

      561bbeb4a049b01286b6fe885be3b4868b907ef37bd26fb4a84a0f0c87aafdce

      SHA512

      78c3965c214f32d9611ae259ef65e4f4a681c5707a77a599f951e42d674b92b3c644919aeee0d7688668487e23e3a9eb65717433d21ec575f5c88e3144d9d151

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      519B

      MD5

      3c3984d72b97236092f12ba577051628

      SHA1

      79943f2a52b3de7f85fa0be3c06da44af7570841

      SHA256

      a33cc52e2a8616d5446194707c280c280c031b9463ead62392288fbd029ca44b

      SHA512

      b1aae88d34bf0ca39e1cc439e4f806598bfbff013e34182f7d8d14ffc7cf74372458f502e68a1da4e31ecc66d0b025992302b3dabd0a4173f1c0d1439d2ddc53

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      359B

      MD5

      f918bfddee46df656616a0f79b291adc

      SHA1

      32d65d1782f3f3ffe16169605fc4cf9146bcbb3c

      SHA256

      850d9e0de604e2b5c30c74e50e5f4795fc0445b8961a6f96d875d8e65d23e820

      SHA512

      134bc98d16559afbc8ad121db932c2c90d82c2850ecad758e0a0e6139f75c05cc240d029505ea89c4b6c5a467ab86205d93426601dad5a48d9b2743ef936290f

      Download Submit

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      455B

      MD5

      886d036a0877faea5f88e30fdf342d02

      SHA1

      b32c0f1f3f6811e5e3f83534acb4458ce847d926

      SHA256

      75aceb7b37dc7099ebf9887b5b4241f6f8fc14087269116266b137105cbdc372

      SHA512

      4db99c419e9ded1b7bcdc60c664aafb80d9210515f6683028c4a90aa4f739fd4d6377893474cdc5c48f078385add4a42da1e8f493c2d1b9a345356f5071d7bd8

      Download Submit