Resubmissions

22-09-2022 17:06

220922-vml5tscab5 10

13-09-2022 03:06

220913-dl3mraeef6 7

Analysis

  • max time kernel
    1714088s
  • max time network
    45s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:06

General

  • Target

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e.apk

  • Size

    2.2MB

  • MD5

    c863eac37df1b80de26334d6dfce8aec

  • SHA1

    ddd76dd8e4de655d7d67aacbec36694e8e221612

  • SHA256

    d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e

  • SHA512

    cb376ddf558f47d92a53fd281600f2bf9ff760daf2fd53e20ceb1c941d5d3a400d8717a0588fa8676fc6a8fe4beee5d417fdc1581e587631bd3913bed0264135

  • SSDEEP

    49152:B/tI21hWuaWaTxuh0J9ZGc1d30O8xz1EUQq28I3Plb5:JtI21hWua7TxSKVwO4+598Y95

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
      PID:4706
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4753

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.psiphon3/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/com.psiphon3/databases/crash_reports
        Filesize

        168KB

        MD5

        8159c5aa59fbe106e4df49045bc3306a

        SHA1

        ea62c1dce0d8204f09e885abc98a28d49f088745

        SHA256

        791e4c7567d2ef3cf6734e1a6f2845930f0d3fa97bc8ae7f9c280cebee91202c

        SHA512

        f4965f7ae36eb915882c7b06c5e4da8a86313098c3bf22dad0a4a078b4a9d13e7c03780ae987337ff56452249e52016f6a703dd3039433c2e3caf9182b1b7e4d

      • /data/user/0/com.psiphon3/databases/crash_reports-journal
        Filesize

        1KB

        MD5

        71f21903eec344f6c81daaa486f9c318

        SHA1

        955a72aa168b1344575cd8cd1561aa04f012fe48

        SHA256

        c37917ac2b702f4da281194093b441b35c3a20168e93d61b51d01c6e48754359

        SHA512

        49ee61c7eafda20f7d364a751b05831ac47f48e17f0a238b24129065c07aaad558bb136529c056db1c8577fc719d5d8590b8e251c8f707d82ec994c79b0e3af2

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        2d17c5de711564a6ef230a68bc6c5e18

        SHA1

        c4ce926130fe5502e855c0416ea02bcdefdff91f

        SHA256

        6c6dc6be2277624a1fcf70bda4f9454f1ead430ae3507c7df0193129f417aba4

        SHA512

        c50f1cd7168a1c37c1b0d3719edd8c6f0af63225bcb740a714586347f23911b22e2d66b75b134f57da7e8f31fdef3d447b90b414021f3ef9ef5b83db00688f2e

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        a036f3b66da32e334cdbeb70d837be1c

        SHA1

        bcd7ca01fa7ffe86db545391dc04ae5a1119a95a

        SHA256

        e0318ecdc549f8e4e5a32c4a7cb9262fbae2d03bef1cfd4967b27cef4354c2f1

        SHA512

        d2e4cfff36b84cc0b6d64cd875747fdd0e6837cc78a01677e13c4da558c7dd5296a51dfeaa35e28b971023c70881c6c6a420b5f33543efdf9dd90f0433b291c0

      • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_send_report_to_server.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_write_report_to_sqlite.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        2KB

        MD5

        cca7a52678c88295770d6d0253ac749d

        SHA1

        e22372dac7271687596e003b06b0186ca9d22aa0

        SHA256

        f02e7d2dba246f0065eecb92285e672249189928ab0410a52531e3c61ab5c84e

        SHA512

        e3e0571b037f65d1caf3f6d92b61e7d166e698dddaa02903326c68e2d8daf7c8e1e463a832e9835f8a2bb8acd904bf0b66b833df216e5eaf16757d7cbf0bb602

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        2KB

        MD5

        c6066ffe7e47baf09a37ef42131207e2

        SHA1

        133c1af30f29e4383f48953c24f40aa5fd42c5f3

        SHA256

        a2fcd534c113869c6fd0389ea2351c4640a632cffe365444fc019e31b72c7030

        SHA512

        5ff87bf40a102364dde4ac030162c2174d77f555e644b8afe1dfd9f6e98935895f4e2da1a75856cc70c30c34bcaabd2b0495cd6f33f6639fe7b624011a26169b

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        2KB

        MD5

        5ec61b8e2795d4953e7293b2451a7e91

        SHA1

        2816b51d4c1d34de4551fe3bfbaa363b44c6cbe8

        SHA256

        b5a3090a9b69e24b35f95d1b17e1eb2b55005d397a452ab2070743ada040b927

        SHA512

        691dbf31f6ac303621a4c7ddf1215c5a93022e10ec30bf5a8692b0e5bcf5ff72cc36ef8907849027cc02ee66c62c2ee44769275f79ed24479a965354ac1203c9

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        2KB

        MD5

        f65d5c15545a7adb62e501f7dec52d79

        SHA1

        c799d4ff908702e7341f8538f58d823c6b3e2e96

        SHA256

        8a9aaf8d383ab8b41cb07a5e63bcd1cc2b552c8974c6a89f3b3ef2dfcc680738

        SHA512

        31ab2015a186173669c51861db5b7c1a491ccda101cf60c0b6a04962033b052b09760f01f7488ec1966df712c2c2ab01d4e1010b9a51495da9b2d0770d02b547

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        520B

        MD5

        cc013388430efde725662781cbf66726

        SHA1

        6cee14bc0b1ca0b32580a0468e737db8ad37da77

        SHA256

        ffe8c0879db43500d89e7647b6d5ad3d1c34663380076620b0aa45f9ce680a58

        SHA512

        8f801884022bdf8b03583ee52253f23b34deb22c0fcaa379ba044ec5083fd3cdc48ff2d8fe22402fab55eb97d2736810e13ffdc8cfbacc270be343b148bbb0ca

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        360B

        MD5

        b9b1a920b3a52ec28fe87ec68c9ae448

        SHA1

        ff85adc01f371d72db47acc2959130d95dfd8cf9

        SHA256

        84b33d53070e9d7cb75ebd6036b4ddfe3391a123e865c6a490776d4ca51507b4

        SHA512

        3ac84f16fc1ec2c65679c8b6924936568b9211af7673d44e5a1aefd47f4dfcb26d2e7b050bbdff51ba0dbac679862f41141118daccda8dccf9a08f291277dc3e

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        456B

        MD5

        49144579417c0352ec9d1e3604b71279

        SHA1

        3e364a2b180f9b24332d4e68002a577192bf29a5

        SHA256

        e2dcd0e518d53551d111f890dec1ee6741cb69f2c9994ba4c50a0f933124c471

        SHA512

        736b163817fd46b153ed37055d19849a5f1c88f40456c811157293065460c6b299936c6a0197ee0c62f9be3697a099a1158d59e0c3a9eb62f7b12cd5a1ae0055

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        519B

        MD5

        76b3bc8c95ea402b89ca5d11d1d5fae3

        SHA1

        55d3acffda34879c340224d5359403fc75aa654d

        SHA256

        ddd2836ea5b642c5db10d7214a1940a8f448f2670202ba54c1546cf46894a3e8

        SHA512

        6e6cb45dfc01317320633d22002a1c236f2871bcc333df4471001c02ff1d4139af3515d97fce601d00198bfadcbf5acf7cb1a650eba917cc3b3732f48e5d52c7