Resubmissions

19-10-2022 07:24

221019-h8nvbsfehl 10

13-09-2022 08:50

220913-krtqcsfbc9 8

02-09-2022 10:02

220902-l2sfqacadq 8

Analysis

  • max time kernel
    4012096s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    19-10-2022 07:24

General

  • Target

    0198b8fa11bf9e8442defa00befa2ab224ada5ebb4a60256f2bf5fc491cca0a1.apk

  • Size

    4.0MB

  • MD5

    0b3248698651c68aa79c128c26df6f5c

  • SHA1

    93be818f6087423909594f5630b67cf0ddcf71b6

  • SHA256

    0198b8fa11bf9e8442defa00befa2ab224ada5ebb4a60256f2bf5fc491cca0a1

  • SHA512

    c9815d347d65cb2184a50b9e0bc6086dd77023666189b69baabfe3e21e7cebaae513c7530c96af877bd0ef03f1f946a23f947bcaafc4be7d89d967bb9d3dbfa4

  • SSDEEP

    98304:rAf1Qd2ofrWriq/urhQuzI6TZS+DixH8bU4bFLzbcHeze8:rANZLky4To+mgU4bFLq8

Malware Config

Extracted

Family

zanubis

C2

7

Signatures

Processes

  • com.personal.pdf
    1⤵
      PID:4694
    • com.personal.pdf:remote
      1⤵
        PID:5119

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.personal.pdf/app_webview/.com.google.Chrome.sjrYgs
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/Cookies
        Filesize

        64KB

        MD5

        9b23e6a88d5a95f155f205cb04b93cd0

        SHA1

        b62dccbbef087a0731f226b96d15d35d8aa5e5fc

        SHA256

        f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

        SHA512

        bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

      • /data/user/0/com.personal.pdf/app_webview/Cookies-journal
        Filesize

        1KB

        MD5

        3794d2e27d383c11a5c4b1d2296d1b11

        SHA1

        5db1c3146eb839ca5b1d554e76402ee8b59d8052

        SHA256

        f9975fcad87d2ebb7b3368b68986b57f3c7d356205a293d9809ad3e59b3821b2

        SHA512

        50e3fe1c5bff7fa968ce366a7be03ed420c530e014a680380f77123282b5a50b98de718b0554970885bbed14cc067e30fb21dd6d7528afa8df0f8b271caa10ff

      • /data/user/0/com.personal.pdf/app_webview/GPUCache/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/app_webview/GPUCache/index-dir/temp-index
        Filesize

        96B

        MD5

        3b47f36f74beef1f202d0dce6cc93c32

        SHA1

        dc678bad6b8192ad77ab2b578deaa847be86febc

        SHA256

        3e7dbe31a65aaa65fa3cf218d6b11a00c10c8f6960497f564dbb43a52d750233

        SHA512

        0695c5d6aee2f33c408b257b29bb7fe394f34be8c1d14bb22fd0b8a8f28c0eee1c93739c302db8d7185c14bf1dafe3614f0fd122a0ec3898d8dabf289c428da4

      • /data/user/0/com.personal.pdf/app_webview/Web Data
        Filesize

        112KB

        MD5

        b663831f8cc130493476d94f2d7a5330

        SHA1

        043a1956ab8e40821d67043f8a9110a8eb36fb93

        SHA256

        c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

        SHA512

        e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

      • /data/user/0/com.personal.pdf/app_webview/Web Data-journal
        Filesize

        1KB

        MD5

        0547864ab8b3b561dd7b5c6602ae960b

        SHA1

        452b6f1ae67b4758665c99b3a85870b409b24bb7

        SHA256

        97d11a6012420d9aecf86db2515350c6cf6b857be70124ecc6ca237386e204ef

        SHA512

        5d2331378122369c25bf7287ad4c5aad7f3975a03578e0abf636ea7410f5c154c1a1d750d31737a0ca9e9f1cc16823366f5eedf076fee3299d75b6ad64ebda3d

      • /data/user/0/com.personal.pdf/app_webview/metrics_guid
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/metrics_guid
        Filesize

        36B

        MD5

        8959670dc8164aae9e6e51708a22b564

        SHA1

        323aa351ce1ec84df7dc47ca809e52e673e8cc9f

        SHA256

        753bea0fd7a6916d55782e48fd609fd5a13cfaf3b5e2b646b0220f3288a72ce6

        SHA512

        595159d53cd1a2f23f0c9eecc1550c7250f1084aae8e2884a8b1cc32f206c8cb5c454c24637d2aee5c822c8ef926ac302f6c7fb12c9f3d772c0ddbe9c2aa341a

      • /data/user/0/com.personal.pdf/app_webview/variations_seed_new
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/variations_stamp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/app_webview/webview_data.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.personal.pdf/cache/WebView/Crashpad/settings.dat
        Filesize

        40B

        MD5

        1d9ac3fd9443008b53cd8d9c2e4f7d60

        SHA1

        fa975c864ef55a0be56836864f507753f3258caa

        SHA256

        5c93151a5957fa89b8f107c5c8693eb31b5bb2f8c1a34aaaae552cf9e6d27206

        SHA512

        8fea7fa1ca5650ba13b7612618da91f9b8164fdd0c8be6c5e72eb117a9b94f3f56a83608bb411ad0604baf150e55157288754627c249977adad06fc8d97994bf

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/44e5652fb145311f_0
        Filesize

        3KB

        MD5

        09f6b191e1bcae0f8aa325bd598e7546

        SHA1

        f72d6f398b3f140be836176abb695ada642debd5

        SHA256

        3e6242760883549402ed7a1f9bd194ad8e0cd7255543336926c875a8adc105ad

        SHA512

        ca24adfd19af29de28b892efe6d836a90e81992651b0818e52ecf04cadadd851b15f7c01ba5afd8ac1eb9f96850ead2bc2c85af5c16b882a3e7ead6762fb466e

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/5b44edcbc5d5e766_0
        Filesize

        1KB

        MD5

        60256963dc82a07fd5b3d1e39f0ccb09

        SHA1

        2919398624b91bb6e78ce17e5489c27d1efc74f2

        SHA256

        d64cd0e98578389e9a7e960cc79ed8fa9995a9c2563d79dc6bbd97159c20d96d

        SHA512

        7072789c69654249f26d300d083200fd1f3773e843af22d416df3388fb44504d414af8371f5dc0b895cd80027a92ed12c0c15e5997c7b65dcd2dfe6349c33512

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        Filesize

        96B

        MD5

        6d72d6fc3a2ac7bbd24505a924c90183

        SHA1

        3de2be8312805a6ae39e8c9036280bf005abff88

        SHA256

        c99db9b8da34f73d09d0d3d80840342b69574a3f423d81764e19de63291cb848

        SHA512

        1b77bcc5508521c1ff98774b9097aaa37dbcc201dc94a101adbe783eaed81b106cc77333548c8d4c18b83ebc0bf9d0fed132bc13c8f351d9182a75e5955072aa

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index
        Filesize

        144B

        MD5

        a1fbd185e62946d38cfca4016f68b781

        SHA1

        5dea6658e70992af4182e7cf75000be081a8b462

        SHA256

        a89a41fdbca12f841a366d35af32361164167fe1e3f7ddafa3eb888201770eb8

        SHA512

        ef975ed305828dbfeafd236ebeb463d07115fd1ff997dbeece0fe2c500eae63740b768a7261f5423581f65cbd60c65229f544d52a71f5bc5b958174eb2b522cc

      • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index
        Filesize

        192B

        MD5

        fabfadc2aa8507b493acce155be58de4

        SHA1

        1ea2560711365f9656596ceaabbc6394ebba71d9

        SHA256

        5798fe11928a8eae782fde2f3cb3c8b7dc2a9008769aebf6126c806ce154f3d8

        SHA512

        454203aa2dbc909ded6901fd895bb19b443217580dbff89444a83f9c9b42a70a9e4c0f1fa89a55777511923e187e982eba042afdd4b89d7d3ea8810dbcbcc16b

      • /data/user/0/com.personal.pdf/shared_prefs/WebViewChromiumPrefs.xml
        Filesize

        127B

        MD5

        6ef709b8536878951e87c29a1518fc2b

        SHA1

        24376c70b00152501b3d98df61fa7db435339172

        SHA256

        10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

        SHA512

        96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9