Resubmissions

19-10-2022 07:24

221019-h8nvbsfehl 10

13-09-2022 08:50

220913-krtqcsfbc9 8

02-09-2022 10:02

220902-l2sfqacadq 8

Analysis

  • max time kernel
    906842s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    13-09-2022 08:50

General

  • Target

    0198b8fa11bf9e8442defa00befa2ab224ada5ebb4a60256f2bf5fc491cca0a1.apk

  • Size

    4.0MB

  • MD5

    0b3248698651c68aa79c128c26df6f5c

  • SHA1

    93be818f6087423909594f5630b67cf0ddcf71b6

  • SHA256

    0198b8fa11bf9e8442defa00befa2ab224ada5ebb4a60256f2bf5fc491cca0a1

  • SHA512

    c9815d347d65cb2184a50b9e0bc6086dd77023666189b69baabfe3e21e7cebaae513c7530c96af877bd0ef03f1f946a23f947bcaafc4be7d89d967bb9d3dbfa4

  • SSDEEP

    98304:rAf1Qd2ofrWriq/urhQuzI6TZS+DixH8bU4bFLzbcHeze8:rANZLky4To+mgU4bFLq8

Malware Config

Extracted

Family

zanubis

C2

92.38.132.217

Signatures

Processes

  • com.personal.pdf
    1⤵
      PID:4712
    • com.personal.pdf:remote
      1⤵
        PID:5216

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.personal.pdf/app_webview/.com.google.Chrome.1rUP7v
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/Cookies
        Filesize

        64KB

        MD5

        9b23e6a88d5a95f155f205cb04b93cd0

        SHA1

        b62dccbbef087a0731f226b96d15d35d8aa5e5fc

        SHA256

        f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

        SHA512

        bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

      • /data/user/0/com.personal.pdf/app_webview/Cookies-journal
        Filesize

        1KB

        MD5

        880adbb40bf140031146833a5ca40814

        SHA1

        458a64406511d47d8bac992065af54e50a358355

        SHA256

        3c70cdb61ec6898bb91a5f0b2fd3cd717f2a7778c7ca131efaef109809733909

        SHA512

        891c83047c58bfd8c3e6630b17be0690e76c64dd62102db416e32616e54b6d6604e09c31437be44d3620d06667fc8e1f9a98b77b588ee7bcad7672e3540161b2

      • /data/user/0/com.personal.pdf/app_webview/GPUCache/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/app_webview/GPUCache/index-dir/temp-index
        Filesize

        96B

        MD5

        0233fb2a832f093badb19f089c4a4f3b

        SHA1

        9b941b79bbf8c8bfa145386a7fe10ae50999a7a4

        SHA256

        d15e8fce1438fb20fee1accc99494606babf0f8cf6597a827aec29261c8cd61f

        SHA512

        b89709f392ba7b042188f4c582c3a4024c05afc488e4572330efdb9b83fa5dec8b25153e31476a27d4fa227e6d667b34aab4722cef9eebdd020e3ac927e41bd7

      • /data/user/0/com.personal.pdf/app_webview/Web Data
        Filesize

        112KB

        MD5

        b663831f8cc130493476d94f2d7a5330

        SHA1

        043a1956ab8e40821d67043f8a9110a8eb36fb93

        SHA256

        c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

        SHA512

        e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

      • /data/user/0/com.personal.pdf/app_webview/Web Data-journal
        Filesize

        1KB

        MD5

        a92b022b205351702e58bfccdd2703fd

        SHA1

        8632b5597c25b0b3017a08935cbf1f0834b91a9a

        SHA256

        69f118b6839f507ec910db8e2748ea20e1e669aa430faa5b49ff82b38ed17c34

        SHA512

        b6e75ceefc2adc1d34f0e9d257e885267a1f0014b76595155320d11f44281a0a0b8ffc282bbd36df257c39331eacd5c0d5205b7badcdaa283e9c437622e29774

      • /data/user/0/com.personal.pdf/app_webview/metrics_guid
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/metrics_guid
        Filesize

        36B

        MD5

        c3e5e087fc5458182b1bbc0791ed697f

        SHA1

        6498d3413c8e9337b595d7a6458f259b05ad454a

        SHA256

        a50380afffed46d87f0df67ff3b8d6383b6c1e285c6d684d180079768b0d48cd

        SHA512

        9bcc736225181ade31699700036c159a050d3fb59e126967e9cbb6c526a2c60a1a9614e32ceca081fd2a718ea7715d456d96d73a7927b468fd9dd1febce17a86

      • /data/user/0/com.personal.pdf/app_webview/variations_seed_new
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/variations_stamp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/webview_data.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/cache/WebView/Crashpad/settings.dat
        Filesize

        40B

        MD5

        99d703ca20fa1e801a80e1723bb47b99

        SHA1

        9562ff71905eea0cea06bb949a9122a6c9f1e2d8

        SHA256

        167944490c363c147dac7373ba6557c0acdc9e13d8cd3f4562fab366ba5509ba

        SHA512

        0ebfa07dc8644b9825ed4473d7e31676d351d22e18589d2ccedf1de18309d812b77d5777e846fb38c8e014fede1ceac5e41b598eb0a185b80e8d8c75a25ade83

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/44e5652fb145311f_0
        Filesize

        3KB

        MD5

        d3485cd78d52200458752e48dcc536fd

        SHA1

        3db7a280371423169f407cd9d4cbc2dee8165d18

        SHA256

        85f27dc55f87a848104c32b02389f950b3f916122b5ac4f9d9672ff6f331f9f8

        SHA512

        6c96b13fe56c6b3580e748b8410d19d1d4e6e987988508d6c51798f6d302360fe0f2f67b12882bde1a5b1ccd3ceb895240e01734cca05bd88eb8fb7cb1d70a15

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/5b44edcbc5d5e766_0
        Filesize

        754B

        MD5

        bc8a61e63d4915e9beb34b8faa92cc28

        SHA1

        5d2d1c3b38ff94a65a4d23930227197d162ee88a

        SHA256

        6ae94e8c6df13be76cb5a03ef42299463695af5b936564bde1c2d06b2fadc039

        SHA512

        46bd2164a57eb4351dfe0733c441749c3ddab5bf3e952f18a88aeefb97ed3cafaf87e4642fbab10986d705904550ab19d59543aaf37a7ed261f27dd0f276b5b8

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        Filesize

        96B

        MD5

        fe87d285a5dcbaad6680506f615ca45b

        SHA1

        e8b311da53a7a0545c29b2ca903940d423ecca9a

        SHA256

        8270a2f309d8aa6330a5a186429da26b9b4fde5d1949c12b0a7c81a37d2dd53b

        SHA512

        052f132d0f5657939629bcf440fb362a9f9e26d6a78bf82f22e0871488effea935167609e6bc3926ac0d842b6fb55ecfae69de4e839d1a648e7d0e4d2527123d

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index
        Filesize

        96B

        MD5

        46ffe30c37eba801402c12c73a6ef2c5

        SHA1

        66a2cfc78610efedca48a8b0e37e12eebfd41e53

        SHA256

        1a9acc3c82af4d5fbd997b6b7e680ee7cb063d888a16c53e1cd32162d4e41b16

        SHA512

        a3c9a1a074dd43d31b451303949286970d9d5fa4b21ea7971f1c9abcb53b81e2e9cfe2567315e52bc9c0472dda203f613cfde9d6761b78cde9ff0feb4d273183

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index
        Filesize

        192B

        MD5

        c8ff3682d4449a3869c5abb6848c47df

        SHA1

        726daf33ef9b9542f15c7b8c74351861e3742f5f

        SHA256

        d3c9a5cf4cc2458c7e81b8d23eb7ded5699657d217d3ded65688add43b20bc44

        SHA512

        ab9d6dc29d8adb796635a20cb210fb048c15df13889ecfbdfeaebbf893543cadf92a7d107da443f7e4209c79bb83b51682dd39b4774d08533051145273d1f414

      • /data/user/0/com.personal.pdf/shared_prefs/WebViewChromiumPrefs.xml
        Filesize

        127B

        MD5

        6ef709b8536878951e87c29a1518fc2b

        SHA1

        24376c70b00152501b3d98df61fa7db435339172

        SHA256

        10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

        SHA512

        96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9