Resubmissions

22-09-2022 17:06

220922-vml5tscab5 10

13-09-2022 03:06

220913-dl3mraeef6 7

Analysis

  • max time kernel
    1714087s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:06

General

  • Target

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e.apk

  • Size

    2.2MB

  • MD5

    c863eac37df1b80de26334d6dfce8aec

  • SHA1

    ddd76dd8e4de655d7d67aacbec36694e8e221612

  • SHA256

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e

  • SHA512

    cb376ddf558f47d92a53fd281600f2bf9ff760daf2fd53e20ceb1c941d5d3a400d8717a0588fa8676fc6a8fe4beee5d417fdc1581e587631bd3913bed0264135

  • SSDEEP

    49152:B/tI21hWuaWaTxuh0J9ZGc1d30O8xz1EUQq28I3Plb5:JtI21hWua7TxSKVwO4+598Y95

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
      PID:4034

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.psiphon3/databases/crash_reports
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.psiphon3/databases/crash_reports-journal
      Filesize

      524B

      MD5

      fc8935058c43c3b0bbe98baebb3e1b38

      SHA1

      d6f0b00196fa152a17ea5144123d2ca672d99691

      SHA256

      81588a7242641d42932bb6e97ce992d741fef14065a0e864bb5d1dffb4aae79f

      SHA512

      6e52370860713048b0272e0ce88d0ca361ef2593dce10c2b95877f7de56917402aa70b9f24173dc459dd71d92c6993a07a3ef596a902834508fe1dc1db7be3a6

    • /data/user/0/com.psiphon3/databases/crash_reports-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.psiphon3/databases/crash_reports-wal
      Filesize

      36KB

      MD5

      f2fe559213abc64e8479f1dab868a222

      SHA1

      72afb4336bbb15d91c6d71d4533b4a096ac06031

      SHA256

      b26a3aa7dae7d69f8cf11e69369ce7d28d2e344fd0bb8867e95ea4deeddde22c

      SHA512

      e18f511e60e552600832a02a77cdae74551a1be2566da0038f8efbbe9c306c8eafba9e3e865a43ed208944a45847c1fbcb3d39ef251190b75f755f0ed72dadb5

    • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_write_report_to_sqlite.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.psiphon3/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      2KB

      MD5

      33d4246efd06f9f754f70ce27dd70377

      SHA1

      a82618679326cc3e3d74c3c8ea22479e928e5c1c

      SHA256

      7b68498789a46b08508e4cb94cae17b97c4b8b8bcbc7046ddae05558ff1f8489

      SHA512

      b61271897e3ef49b1d4691174df36972fefa8e645be7bcd40fe85d4d52f054bfa0138a20c0a0366e4f2684d440b6c725084b86ca197759dc9bc50524bd043dd4

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      359B

      MD5

      79088f7ce6d5d3025930528c11e7c69c

      SHA1

      434faffa81acfacde4e8dad2d9598a9a7ebddbb0

      SHA256

      bf1469c90603c4a84dce115e0c97f7fbdb6e4be2118ec2954bce86c9a5b6bd82

      SHA512

      ec4839f9d80bbbeaf90c9aa75a9df99d8b532de5d1c0bb59858ad10105dec2a6e08a7d72ef797047e763d5f9150a15fc90c9aa3d9df0bb5d699bbc9d6b66e4b2

    • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      455B

      MD5

      a255a06061499548c8a52422dadc27fe

      SHA1

      10a100e7baef8b6845bffbd433a8c8c045baecae

      SHA256

      c16526cfb82e7d8b111adb5b7bef6e58fabf07e1f3807ac5b96f51c38bed5b20

      SHA512

      bad0658b86b82b125a4d9d9211a598b10e3f5d7fa889d041702583b99699b80e41e40f7db7c825f1b8794c3737776117fdfc50382fe090b60ca8aa9137287596