d89442b664d78a93eb087fd0269c7a7277e75633dc1247d6c9cd39cb03ab7cd3

Analysis

max time kernel
338014s
max time network
131s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
26/10/2022, 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a2447364d1338b73a6272ba8028e2524a8f54897ad5495521e4fab9c0fd4df6d.apk
Size

9.3MB
MD5

4cf6b87bc3cf095e97445f1d657bec90
SHA1

c769b9da55e930d1ad4d8e68cbc612a9e7f8dd24
SHA256

a2447364d1338b73a6272ba8028e2524a8f54897ad5495521e4fab9c0fd4df6d
SHA512

42e5599f45fee2bf45c142a8ff1892592c1f29e58cccf5dfc6dedbf5781d61d332d07437294ee1531ab19c149d62db01f5d9c99e482e2ca41d71b6e96f52e376
SSDEEP

196608:3rmb2U1w7CttUkt3/yn/PDCyrzqDMm7lcqEfqMzFPcCEbooUDJl7F1hhuG:7vUxHyn/2oGDMmlcqReFPcCjowJJh8G

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.candlencom.candleprotest/cache/1582435991586.jar	4771	com.candlencom.candleprotest

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.candlencom.candleprotest

com.candlencom.candleprotest
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4771

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.candlencom.candleprotest/app_webview/Cookies

Filesize
64KB

MD5
9b23e6a88d5a95f155f205cb04b93cd0

SHA1
b62dccbbef087a0731f226b96d15d35d8aa5e5fc

SHA256
f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

SHA512
bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/Cookies-journal

Filesize
1KB

MD5
7cef7850eca3cf0db4bf088e9646aebb

SHA1
172b77347e9f7c3158a49e21781d5d562b590b97

SHA256
0fc33aace94b2734285629005a37b00b4de960618fa7aacaf4c655eee36972a0

SHA512
53ab26e167364b78809153319c0e2ecc08412490009b3f4d88706dba9792f2c189cdcbeeaf9914459ca611fbc26c27fc4ef6de2dde8c55c118461046686a4a2c

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/GPUCache/index-dir/temp-index

Filesize
96B

MD5
56f09f4d5b86a57aa8bd6583e466bf37

SHA1
b3daa9ac46d6fa206df67c3971f88a1f192129f0

SHA256
0012525f5fd94f75c6401f97b088186b7f916bef9f3e1fd2d14fe4cec231aa12

SHA512
6e1b13643a1ca4186cd9f078a8052038096dba891f0daf26bf13c0ccdd616c038741f56032f244bb6514efcc378f1f28577a02f56c9da6207fb043d5eb6f89b0

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/Web Data

Filesize
112KB

MD5
b663831f8cc130493476d94f2d7a5330

SHA1
043a1956ab8e40821d67043f8a9110a8eb36fb93

SHA256
c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

SHA512
e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/Web Data-journal

Filesize
1KB

MD5
74c9e78336bc31507cc62f2224e95bd1

SHA1
b44146b67cf9febb189bf1dbe696ad85c3df3909

SHA256
d68b67addf9ac7b2d6e36e11df86876b32ba62b1db7ac48cbec25526658fbd05

SHA512
c9b545fbeb2447c9b12dc1106458ec6aa12d2fc33317971e9330135115bf7c10638da218329efc602c22a801d580c6e5590e27daa1ef07e508075ebfa865cdc9

Download Submit
/data/user/0/com.candlencom.candleprotest/app_webview/metrics_guid

Filesize
36B

MD5
2fde653b0b2b027b495509ef4792a1b4

SHA1
855273b6d4cbc282b2b7634217e7382844163d64

SHA256
d4aab82bb9c92e7a0815b51efba0038fd451f64b19749be330aca4f6ed52b2fe

SHA512
e52ffae79bfd82a64552ce4d9a79adcd16d6d93f5b0bb5efe5d834464b77855801b820da20ce4ea17810a0e9df8ccd7b127e73fab2e4b83abd49ed43c8f526ba

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
415ea7a491610d90ce4b04f2f0723a08

SHA1
9bf2db8eacff496d425ea00934fc98282c5fe1d5

SHA256
4736580633ab40a13b96ad48af0e44ceaab84841f14e4aa4880f0d0736d0401f

SHA512
51e51faa3b10f65ff2408d5408dd3942f4bd5f6e846e34db02102f8aa0a5bd6f1d11b9ff6ec9ffcc26fdc6ced516f21a4ce2ff183403ac5987e9e9c0af40985d

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
35e28bc7d0be3641cc47bf14b1b286af

SHA1
d5cee281c90fbf433c54551a6d231bfae08c6a5a

SHA256
a95297e48b2b9ca140bc8cf9cc1066de3cc13a4d7f33f7a0ee47cfc79037dd10

SHA512
95b484de7f126130cd575268f32ca216930b4c48692ec691ea74fff64d6bec74dc6d729c7e437be48d7f22ee072cf70330d81f592388952f9ecb18c39940dc6e

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/f038e94cb33282ab_0

Filesize
400B

MD5
a62b20c6608b3694260e345c1d80b467

SHA1
ea6bec313d9a059a7f4e1e72bf8cfbae621846d8

SHA256
6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929

SHA512
f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
96B

MD5
03bda44fa192c6f4ef9cdb235643369a

SHA1
8d2701566bb3d9fd88cedc397fabd8004175d203

SHA256
e7a26d80cf3f5bfa59d167791a547586099a75bfda91e7616f327c9d47c726a7

SHA512
3595bd1a0c46cb7474acee69802214cd8f8f8eece0ce7de0e39ac553756359655563eb945998e7517bd4390b9040a983626530bf89c5f8945027324cdd3aef1d

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
144B

MD5
00349653252e89e87f97a02afe89ef7b

SHA1
8d8bae4ba0df5632a50aae0a67709813e471bbb8

SHA256
36861cb4afe71041e532b74a5793888fb3901544c3fe922a3a0d2e08c95af710

SHA512
b3c183b8d4a01546eb8db85482f4f859d17ad378ea02622cc133261ad47e00cbd8e314fbc2bd3ec777eaef3790ae6a367086c6f1a60c70ac0c4e4bd3e612a32e

Download Submit
/data/user/0/com.candlencom.candleprotest/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
96B

MD5
e4c3aaa49c57876b0e8bd6af1993d0b8

SHA1
efb92317d10da71d912bd4e4cc731a42f4448b93

SHA256
ccd14e0b49456dd3d5ddcaee7bc701bb0d1057bf696244c3f874015701003832

SHA512
3564703625da5d61c0f40a38dd1c600893db5b70141ace07d55cea7e2c7084a2a364409bf03aa939cfaca464af8e12f23c115fbfcd3adc215855bd25f773b7f3

Download Submit
/data/user/0/com.candlencom.candleprotest/no_backup/androidx.work.workdb

Filesize
8KB

MD5
b6ca8b30661a7844ed292db75a29a953

SHA1
8e0d397ab1f2ced1f143829084c3f53333743bdd

SHA256
63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

SHA512
d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

Download Submit
/data/user/0/com.candlencom.candleprotest/no_backup/androidx.work.workdb-journal

Filesize
1KB

MD5
526afe65f5c2042d85e7a0824f2cc1fd

SHA1
4164b36f840ca0a1b605ccfc5520fb37f0763baa

SHA256
8611dcedac7823e527d9ca8c8b0a423123f0e73ee13f0d1f7d53282755af2674

SHA512
3a199fc61ebafa766ee79e3ce7b85f378abb868ce25a03d416e64dacaab08de9022ed166c060122e943a0ae5cd68ade13b81011618403f81ea496aba8bdc1b5f

Download Submit
/data/user/0/com.candlencom.candleprotest/no_backup/androidx.work.workdb-shm

Filesize
16B

MD5
4ae71336e44bf9bf79d2752e234818a5

SHA1
e129f27c5103bc5cc44bcdf0a15e160d445066ff

SHA256
374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

SHA512
0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

Download Submit
/data/user/0/com.candlencom.candleprotest/no_backup/androidx.work.workdb-wal

Filesize
346KB

MD5
56ed5d15f6fbc4376ea5d73a2aa10156

SHA1
dd427d568cdbbc26f8dcc0dca4b75fc69898def7

SHA256
20e2c3a169018a273f09392aac044f3f658778a56d924fc338439d14128d2976

SHA512
9075d38066ca07405feddc397543dc8b6d3aff9c3fdd7e9ea4f096aa418a6eaf1e61a054643036c140a89356827192857569c814c09b65bb20481b3740237fb8

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
6ef709b8536878951e87c29a1518fc2b

SHA1
24376c70b00152501b3d98df61fa7db435339172

SHA256
10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

SHA512
96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/admob.xml

Filesize
133B

MD5
b0ff79bd41badb07f2817a75dfb19f8d

SHA1
2be3199006f7e916502678c0e65baf2396e3926a

SHA256
a7d731626acc3590adddc50b7ca8521580a5a617d7ff8f695b828895e550be2c

SHA512
047895904d17a192c69e6582a870cb2339e83981016fa2a629fa1fe223f4f9d63bb9cd6196d3f8d51ef912bebcf5fa0f67e760ef3fad90a339d720df797d23a9

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
9ab88cfd5fc96099cd5a2447341c60ed

SHA1
3111f761f25390bc7ed88132ebb960f98a589a91

SHA256
8b959ade95c0c420cb3fadef70487b6ba03a255e7c7a1d268d508c80eaf7bec1

SHA512
a1a31f05bda97ae616277f01f2e1532459238bd846c0b2cd2fa6332d4d92442733eebe2191ec7e893d05959ad7b893ce6d77e4159214cf25b2fbb3162da1d78e

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
40c3a3d203ae677d13eac9ff22f75a78

SHA1
40857ad673592927d7e44d99d272c8349f109ef0

SHA256
de72660cfb042d246d9cbc21e220b9bb1a9a277e5a9f17fbd181e09affc4cd1e

SHA512
11a17deaa1eaa8b8db7af1439d663b8b5d304c990f33c32c2701bfe14f7c54b26fba985c600c82e91cfe23d4680dd07cd1ffe2a7166f68444898bbaf4dc6bcca

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
9ab88cfd5fc96099cd5a2447341c60ed

SHA1
3111f761f25390bc7ed88132ebb960f98a589a91

SHA256
8b959ade95c0c420cb3fadef70487b6ba03a255e7c7a1d268d508c80eaf7bec1

SHA512
a1a31f05bda97ae616277f01f2e1532459238bd846c0b2cd2fa6332d4d92442733eebe2191ec7e893d05959ad7b893ce6d77e4159214cf25b2fbb3162da1d78e

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
ca39bcfc8825469c29f79d93f7ee9e85

SHA1
8cf4754e2487cea051dbe38028ebf9b6e49d0c06

SHA256
4668fe52325bd0aa0379de19a3c266d89b5eae2e39a44d407a08bcaf1887c201

SHA512
de892349990e6c67fb727b35ecb2c3162649d61e2f4de11f8e6e84a202fa01e0cac599c43598d95f3cfc2db91a0b9f59c1869b62c1ab47796bc1cc2a12b867b1

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
e428428bd21a8f635e48fa2a586f21ff

SHA1
b1de676f5db507e346cdb66e28d781a217e5537c

SHA256
1059c0cc4fff6200427c158fb11449ef8836b4c715acc6287aeb6051a8876ace

SHA512
316f215e2432b06dd54202616ad9ce3cba00cf5d10984848047d17d85674b33eb525d7735c1df3b4d2b979088ce1f83197c26e4ae9db96523c60892fe858e7e6

Download Submit
/data/user/0/com.candlencom.candleprotest/shared_prefs/com.google.android.gms.appid.xml

Filesize
2KB

MD5
d2af97a59c104ec69e7f0524aafc6f08

SHA1
9269bc1f385ba47baac3497624186d847e1086f1

SHA256
61533c4a414528e966e5e35c4ed2b7f23fa923f718595f89ea7d95f8b3e7795f

SHA512
7b4b97e846492e5bf6e776d5e48f7a4878a805098da666e0e7d4497d90088e4297b3dbae91a55d7d4da61286e98f273b7aa1410f0061256fffb52df98fd016bc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads