Resubmissions

22-09-2022 17:06

220922-vml5tscab5 10

13-09-2022 03:06

220913-dl3mraeef6 7

Analysis

  • max time kernel
    886156s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    13-09-2022 03:06

General

  • Target

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e.apk

  • Size

    2.2MB

  • MD5

    c863eac37df1b80de26334d6dfce8aec

  • SHA1

    ddd76dd8e4de655d7d67aacbec36694e8e221612

  • SHA256

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e

  • SHA512

    cb376ddf558f47d92a53fd281600f2bf9ff760daf2fd53e20ceb1c941d5d3a400d8717a0588fa8676fc6a8fe4beee5d417fdc1581e587631bd3913bed0264135

  • SSDEEP

    49152:B/tI21hWuaWaTxuh0J9ZGc1d30O8xz1EUQq28I3Plb5:JtI21hWua7TxSKVwO4+598Y95

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
    • Acquires the wake lock.
    PID:4575
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4631

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.psiphon3/cache/1

      Filesize

      1B

      MD5

      7215ee9c7d9dc229d2921a40e899ec5f

      SHA1

      b858cb282617fb0956d960215c8e84d1ccf909c6

      SHA256

      36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

      SHA512

      f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

    • /data/user/0/com.psiphon3/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/com.psiphon3/databases/crash_reports

      Filesize

      152KB

      MD5

      3eb6b68ab8f3b4a974dd6a8bb6a131dc

      SHA1

      1908d0fc29731b8b15bf8b33c3cd805cf26e27ea

      SHA256

      9a696e08b63e80acc2ffd562f487f77c0fa6f9672c3179096efb7e73dcce1c29

      SHA512

      3fd1f1c0a86c7305bee534c69327ef8c5ed26e0d0758325e27e9b74cfd026b79768dc9f210d39b74af39ab5fec9c0b8dd55eaef8cf756f07e88467adb3fe2e74

    • /data/user/0/com.psiphon3/databases/crash_reports-journal

      Filesize

      1KB

      MD5

      704371d69c423e86cf4670ff991985ef

      SHA1

      1d3355f79d93b78ce5942d63e5a4f4e97184d105

      SHA256

      cf40f8d0d124dcd2678dd0c36f78dc0355ea58b2b2bfadc3a1d16f1896e32a20

      SHA512

      dac51063f4c04a2514ea893c86a48cce65d2fefdeee07c6ee28fc867d7cb0d42d461920a3eac43ce80985fbe451531491b01f593885528b5cc12de3941f12913

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      133463c4078759282491cba2979a2a78

      SHA1

      077d32e91273b69b2c8ea6d65a831f3fe9c6665e

      SHA256

      bcbf43ab6c40dd025a402d69eec0d42a01b4d337b2ea9cf4712f46a362d1fa24

      SHA512

      590f7c2bd654937a993d400e05fa57b84d96d144e0207af0dd25be55856f1ad27896a55f780c36fd364ee0c286d6dd93051cf0f0afb844a0d9f26b9b8e1964c1

    • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      bf6294968ab398e8b6a97210c67b95f4

      SHA1

      8d6e4a05398018fab32ffbb7f5fc1c493dc8f8d0

      SHA256

      d4f9570272431b285e75e2109eb102680399199ba310d586244aec92dcd56d23

      SHA512

      51d8d5ecb8789238a27eeed65f7d84c4c96f55bb8ef179d81b20e77152822a41136da0c64369d3651bc35216b8f3fc6950ab79297874e8a08a329a88a76c7936

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      2KB

      MD5

      dab257c421a0a74ee0e6ff0481c31a48

      SHA1

      ac3289029705bcc3539133dfc2872d44ec2091c0

      SHA256

      afc3e883d3d5891a91708a08abb46cdd1776dc35d264bcb1c284ec48fc6a4100

      SHA512

      1ee87f15a2da7cf33f98b6f2b094222a97f63b8940b53e0968671654632fe1f65ae75e024ffc2f36667b0a9b069d9253eb5c8d0b330b4ea8d09c1d82af323f19

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      2KB

      MD5

      679c691f4ac7244008c292609d7e7de0

      SHA1

      d7bec9448c8684b410589a29546f4714eed0f82b

      SHA256

      fa87859f254b621344faa36ab15d22eb3b32254b3933082608cbad0576206ae6

      SHA512

      c51c8ddede7ff6472ea0d3679bc55ce7710f46bb8f241111beada53ba05e6d746cfcfc6c4e03b964dde0cbf9b3d8edfffd9692c287aaff2ed5f8d9c46b5d0c02

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      2KB

      MD5

      71d8a34ed0b44af08e611f45acd79055

      SHA1

      e8dc0cbc2a8c5d14207c065392b245ac4dc91de2

      SHA256

      12ceb51373f38ce9315bb5ddc025f1cfe850d55db8087d3bbb11b2d4ebb72a90

      SHA512

      cf6d07baf927ac2100b6f27538d7166e18e9810213b55505038ada8cf4ca63828f27fc355591d1278e407b32c51c5814d53db8107661972c0983e68556704fc1

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      2KB

      MD5

      f05c629197540075772c0e5b6b289c15

      SHA1

      7f46f9f447c2ef0648a8a4e3b102ad11d83e33f8

      SHA256

      5d0c0d2c490c124e72238759926d476c9bcd3a00e5216ee7ed53843299181804

      SHA512

      85882b2ea453cb83c81e2ef2a10181cf6db0d8e3d910e6c59fd933aa276f844b4502e2158e077e76f808c1f7f4e319184639944721fdbf5600f0d57d24c2a0ee

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      520B

      MD5

      262f7d9a732b14581d7f79aae2894172

      SHA1

      b6a2a824d74ba700ee66140ae67732d064fea17b

      SHA256

      fab380373ba089c0aa1803b121ea73ac64cdba004d59adf542f363d90022e67e

      SHA512

      64f8ef00fa2fee7935ab527366355cf125820892f4b30398b1c417a0d506fd6d8606e50feb96b63940aa7f005f1112c8d460a37ee552804365750a103aa177ee

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      360B

      MD5

      66d6217806d4fcd99fed11aa387a3ccb

      SHA1

      32ccc005894f0dd3b4ad135424762d85fd555086

      SHA256

      b19bed3e6d6c398ba23659fb4899ebfbb98dafa3ba3f567c9aba37da09c8c85f

      SHA512

      5db763c25622faad629c52ac2f1b8cc76e7a1456eb23b28123135b1a6ec3014ebe06309c15f0c38ec8aab6ea8dc92b2adc95dba84186dea12cd50136d8d14a07

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      456B

      MD5

      a9b83ee5974d34eaade41b1db7c1d4d4

      SHA1

      02d34dd762d42d51b6641bb2cee95ede595e8808

      SHA256

      46fa66edb8ab974615ba814d9155411577c78b9124746425cd0377ffc8846088

      SHA512

      f0bc2b194f91c9fe7aeab06617d486f53820a176a3b2162e25da1af1d713052b6de0811c7a4ce5ca1919922b8647a68ab521bd17e2e064d53f3bc6b5b403144d

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      519B

      MD5

      0080b7a637d794f227ec83d19b016f68

      SHA1

      8cb37a75a3bc3ec3f8d05df001ff687e4a3cc483

      SHA256

      2654d49a3beb42e8f92721d174b3e9bc78f1e74a3aa3e8fce133b803187875e4

      SHA512

      4d0280cccf1957309ad18dc32b7d88731fbf0f920a69fe1f80c126f6b013077e19aa38c4fe95c0171a6b24ecf94001db1b686e9998f32489ce34432ebc9568e3