Resubmissions

22-09-2022 17:06

220922-vml5tscab5 10

13-09-2022 03:06

220913-dl3mraeef6 7

Analysis

  • max time kernel
    886185s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    13-09-2022 03:06

General

  • Target

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e.apk

  • Size

    2.2MB

  • MD5

    c863eac37df1b80de26334d6dfce8aec

  • SHA1

    ddd76dd8e4de655d7d67aacbec36694e8e221612

  • SHA256

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e

  • SHA512

    cb376ddf558f47d92a53fd281600f2bf9ff760daf2fd53e20ceb1c941d5d3a400d8717a0588fa8676fc6a8fe4beee5d417fdc1581e587631bd3913bed0264135

  • SSDEEP

    49152:B/tI21hWuaWaTxuh0J9ZGc1d30O8xz1EUQq28I3Plb5:JtI21hWua7TxSKVwO4+598Y95

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
      PID:4921
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:5163

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.psiphon3/app_webview/Cookies

        Filesize

        64KB

        MD5

        9b23e6a88d5a95f155f205cb04b93cd0

        SHA1

        b62dccbbef087a0731f226b96d15d35d8aa5e5fc

        SHA256

        f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

        SHA512

        bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

      • /data/user/0/com.psiphon3/app_webview/Cookies-journal

        Filesize

        1KB

        MD5

        a7f9460eebba71c5c7b176ca15931bb7

        SHA1

        5b55bcc0ec8aa8ef7d759fcda920151ee5c43316

        SHA256

        f3e1c4bc9907d403752111a57c27f1f14f03a3b37b4b0a7906f474e0e822bb4b

        SHA512

        d0308ef4d7ce2bd517a9312445a3b25fec0d6272dcbad6ca8948b5ed22a22f388b88512588f852d3d688e7c2cb984669607641c0d2736a5b42d2c2609c1efc5e

      • /data/user/0/com.psiphon3/app_webview/GPUCache/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.psiphon3/app_webview/GPUCache/index-dir/temp-index

        Filesize

        96B

        MD5

        710a8b377ab9baf781a6192a1307b650

        SHA1

        d1c32a0605aef9509cca423e1530767f7fe9cbe6

        SHA256

        2adc7096f30aa66a2a97cd458daa0bc44ede45f4c0febd3e81d38a281fd31468

        SHA512

        f493b1a6e436250688dbb7ea1f5884f4ac555ca49d85ce27873ae0fd5a8d15029491777c752a1a35ba666b1ff746174d56abccdca9661d61b6785ea8cc166a85

      • /data/user/0/com.psiphon3/app_webview/Web Data

        Filesize

        112KB

        MD5

        b663831f8cc130493476d94f2d7a5330

        SHA1

        043a1956ab8e40821d67043f8a9110a8eb36fb93

        SHA256

        c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

        SHA512

        e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

      • /data/user/0/com.psiphon3/app_webview/Web Data-journal

        Filesize

        1KB

        MD5

        7af229d1a962dee6b445d6cd42b1ed75

        SHA1

        fe3efe4f91b4734f7a38edf38791a41796d9c5c9

        SHA256

        211e14d85e9cf3aa3f1ff09d3b0ba0caac5328090085bf7041ab007c427a3104

        SHA512

        a251ec77508e3429bc0506fbb4c4cf9b1903e1cff5ff0104185d8009a68ff50bfcfe49e2218cd3a7d22fb0417946e3791234c97a1d03d8616c978ecf320ec8ad

      • /data/user/0/com.psiphon3/app_webview/metrics_guid

        Filesize

        36B

        MD5

        8210528d661d2e609c3ac4de50983d29

        SHA1

        bd240b998287871895b9ad5e30f22d440006c849

        SHA256

        cd49f945691c5a9c36c5439a2fccbe14d0594b88fb739790aa52518c851b82f1

        SHA512

        c6d4299a5c89bf9bb84a70b8229d79be74bb8f5dcbbdfd92ae01733b8ff541882228626e0a1ae9ac3584ccc984281674ab04777b7bf73112fc81e7d8b94fc01e

      • /data/user/0/com.psiphon3/cache/1

        Filesize

        31B

        MD5

        8176b327eadc684a74f17a18bdae6292

        SHA1

        af5b89dead35782eb7b1466a3412c31b72240014

        SHA256

        2689052abc5526a9810fbae5d3f64ac500988559230846c0f089ad33f20b7633

        SHA512

        3071850d772c1f5ef28ff8133018cae8d59517a9674b7d941111170a9e28e38edb3e71491954f85bb30bed56a527a2dbc0e5a5b56d6bbbcec5d7f510bd46d6a8

      • /data/user/0/com.psiphon3/cache/2

        Filesize

        1B

        MD5

        7215ee9c7d9dc229d2921a40e899ec5f

        SHA1

        b858cb282617fb0956d960215c8e84d1ccf909c6

        SHA256

        36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

        SHA512

        f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

      • /data/user/0/com.psiphon3/cache/WebView/Crashpad/settings.dat

        Filesize

        40B

        MD5

        e79b41ae76de15c8257368b58d62e254

        SHA1

        a5e970924aac24c4b43eeb5240c149ee584df3b2

        SHA256

        d7e3379d844476f5e893d674ea7a07560592320db7cc7a26d23d74ae6487f490

        SHA512

        5a76f6dadf402106b89a18b2b181b7a3c7900ef9067bbb02ec677e58d42636e86f6716d02ff4d6ccfdc48a9e083516be7fc938cf2064667eba6bd711b06d13f0

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/2e7835adde895baf_0

        Filesize

        270B

        MD5

        bb8ef6315fdf6edb8a2300066921dd42

        SHA1

        64b9cd2ac11096e7c8ba1e49d20e278cbb023f08

        SHA256

        74ace003dd2404a418e62bed21b36bdac42197150c2e544da032d98e0727c69d

        SHA512

        2111cdddf3b1096650781cbba3cbd119902de78df6898c7c5ca700a7e654e8cccf7df8794c452f92de018d41c7369ee1c91be4f5958025e97d01d23fdda52ff8

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/Code Cache/js/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

        Filesize

        96B

        MD5

        fba290860db5e3cbff64e56b7ec3346d

        SHA1

        e99370fa9323f03030d2d84c06c50da456e84958

        SHA256

        30201a0ee7d65b09ce8e4abfbbf989c3f15d7ccf08351ddf6699d3b7ee09d32e

        SHA512

        30c521dd3f99465c2822720ec64693e22934b8f0fa3fd3708f098218d9b6685513b239243686aab7d504345cc44c2df1e0c786f97715df0f45b9a19abcb7e549

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index-dir/temp-index

        Filesize

        96B

        MD5

        305be4f9fe8dc71935dda68a79a07044

        SHA1

        d3d4871ad76d19c686dbebce9f3237fa80a8927f

        SHA256

        15781bffab05cf73f1126755436c948377277b987032e70d7d32d64fdc916a89

        SHA512

        33fa34d0a2b7aa306757bbc2db2d7a6e2b6e8819d6017a83f95e81c6bdd23efad9d66954ebfffd7302c6abb64e5b8beefb4a073e2f369f65045e9d62a567b471

      • /data/user/0/com.psiphon3/cache/org.chromium.android_webview/index-dir/temp-index

        Filesize

        96B

        MD5

        0adf2cd66658644c42b845423a86a4f6

        SHA1

        9b442b6e385bf90f212d5e7131ba89d1a1804825

        SHA256

        50ae8f303091f1ed8f412f0c17307287f00692da3c558fbc2b4ac328adafc726

        SHA512

        2b637df93d21ff2ff066d57dfdfca34862ba874ca9e572e2004d4ba8bfc1dcc81f1a16d5455245a8d379f3d8cfb8ed079d98629de989c43b0dcce59c42e394ac

      • /data/user/0/com.psiphon3/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/com.psiphon3/databases/crash_reports

        Filesize

        152KB

        MD5

        8c9ef71b8e7d240db50449cff69f3ccb

        SHA1

        acdbc7dde56ed2d78c6ebfb338ec7423c53fa62c

        SHA256

        6c5ee5ebf042e68676a5be2e46286a88f1a59a3d10781d0c6c9afe24c53ad99e

        SHA512

        3770e3e18af68f849aceb11189a1bbc4a29bbd75b114080b787279eeea6eb347baf53119403b14fab28a2546efb1e62f234154a13a1a573b0b6aad1cb2c7f496

      • /data/user/0/com.psiphon3/databases/crash_reports-journal

        Filesize

        1KB

        MD5

        beb8c1725cab0ee4751c6feca774a15b

        SHA1

        aa22da59993bf0c1f9bc30849445f529a0c6964f

        SHA256

        c76d724ce3208e76f6fbf8330fff2f9b72719d49bc0ad2b87ad31f52f2b6db96

        SHA512

        39c6eadb97ae1bba48ab1e0d91a8787e7b530aabbc9e9414747748c0bbc2ad730d34a663c4472d70f54da76375264c2438a7f82fa6a824def7d3ed38b2eff38d

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        9a44258834ef1573956be41475afbd2c

        SHA1

        3e5b1d1763330ada90205666d7a158fd3884b6cd

        SHA256

        acc4d1815ad787ea5898531ae1369b21919e87c1d9868b06b98b9481796443ac

        SHA512

        049437fe27fc09c0cfb3ecaaa72935e4fa623a2ef5da91cf644f342f966e1beae69a51bedcf644230582e0e90d4c0a118f9e4b69c683efcc6dba8efa674843ae

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        3566c5be2e8492e685f27e3ff8fa6650

        SHA1

        66321ac7245f100c4d3a8f74655d66b34ec8d951

        SHA256

        31768fb48b6e3d0f83bf2cd55d627ab9dd6afaa92d75c7c2cf79efeb43c5f9e3

        SHA512

        a99024fe2336cc54bb85b53b2a840547f48bf6629b13a10fb5d9a7f15ac883d60dcd5fba05a42469fc161941536f8473620ca530ae04fdd79d5bef4ff0a488ee

      • /data/user/0/com.psiphon3/shared_prefs/WebViewChromiumPrefs.xml

        Filesize

        127B

        MD5

        6ef709b8536878951e87c29a1518fc2b

        SHA1

        24376c70b00152501b3d98df61fa7db435339172

        SHA256

        10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

        SHA512

        96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        aa19ae9a879d7b7706cbefeaafa15bb0

        SHA1

        69b2cd6e3963b95450423c57fcf9714143eda5fc

        SHA256

        3f5dad05b8c4e3805d645c9c864d23ed4052b7699b7ae2d359503c459a817a68

        SHA512

        ad1a72115542a3a6a8660d7cf47fbbcaf54bc8e411b6fd7a349df708017e48bdd7b319fc6a174d27da619aee1a7b375c6051f9c0371dc7297ff5deb38f79961e

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        50a933cf193242dd3c66b6fdac253e15

        SHA1

        e52bade69d99bc7c411430b92b785ac782f9ac48

        SHA256

        6ea816a8fbb5d714306604150b3964343e3a5a4aadea35b392625624da99b047

        SHA512

        1b950380c1a429ba034207d137d9a04bdb2717815fb46b227f06df9a7919ac771c0ac6fbd15bbb772a312c008c424910df47626cbff58dbcd4ee410edf6e1714

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        1c6a4b005699bacd9f0ff0527fa6e6cc

        SHA1

        5d0a9d4523724228a3aba7261725906f1fd989d7

        SHA256

        2af0b3998240550978e76f3e9fbeca7d54cbda2cb803c34a0e1227a9b957c5d9

        SHA512

        f0065c13051b5ef4b61ec88697a894f6be459ddc40304dd89f28a9550454822c02dc1f287a102d55b990ca93812ebc67a493d8dc63220dac1fb54e9a95e45d38

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        182e3e38edf25df755f2e6e8cf20f6dd

        SHA1

        fff18b4a9ae122e524edbd340f6b620d439e43c2

        SHA256

        b96844e62e63d64f8201dbc0978dd3689191c97190b1f74808036ad445161e3b

        SHA512

        2dea1eb4220800e24d162ff28c3a9216f0d60d5fd2e64cd64379a0a991b392d1e12908f14a70bd2a3a8fbfbaebe3e4461da4d995b746516928d97afde721b3d7

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        520B

        MD5

        2627cabefd541ed171a0873109ef312e

        SHA1

        6a6531d19b9a5c744237ce20fb4e07fd4f19a1e0

        SHA256

        e6136e0dc1f7610a4631fca8b97b69f831f35ad8f74fc061dfbaca1e84757f6d

        SHA512

        088440c809135063321b9e0fa4311d5bc108d9a4b177627ba2f25e0aeb46e1c6eefc3eecabd6af8b5656835197012253c13605aeee44e7187decaf93af2c5f70

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        360B

        MD5

        e27f14a7e1c4686be2537157e8539318

        SHA1

        5dbe31de8dd7ad521b1f5b33f53f175715780a9c

        SHA256

        92aa08287ae19cfb53f33c8859686c3b52b1561f645c0a329f7d8624f7f4e91e

        SHA512

        a0834bc6ba55d3cd3079ddbe63df411acc38ed7932b2a95d8575a502beadedc8b38c916a8aefac6b33951477a549ec45a04b9f151f934cdf864e6e61272a2775

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        456B

        MD5

        725b4c6a42c2cfd374cacb82d9ac85d2

        SHA1

        05119b666440f39743844d3f05931df839b78d74

        SHA256

        918c7350838bd8f09c7bd66ca8316532f31fdd0dd945c4a5905efb34e117670b

        SHA512

        8639a3333bed45a5da38d27ec71d7e7b2216ef5a332f686ed89240bedf4122538a11355e3c83d53b0b7dee765f7c0aa3333750e7aaccf4d7ea3e5532d9b96b00

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        519B

        MD5

        1d7b597f45ed28bbc2d854f1cd8e7af1

        SHA1

        edf64a3d80d0f4670997958094eb343cd85f5285

        SHA256

        1ad680ebfafe7002787abdf6b9cbe2b2bc4d3d4da901dd63e4f8c5bdb0b2155f

        SHA512

        43176271d6be381dde2f8caae6e64ed586fdae319fad591492d57f6583b20aee02712d77d643b7a1e39a99022946bd99bdb6071a143fdb8ea24c5c82ea56fb14