Resubmissions

27/10/2022, 16:01

221027-tgem5acff610

21/10/2022, 10:54

221021-mzjlgagdd27

Analysis

  • max time kernel
    439323s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27/10/2022, 16:01

General

  • Target
    68a1452172636b081873b9f7c1ae3794035c4ff50d5538b656caf07016b74d07.apk
  • Size 6.7MB
  • Sample221027-tgem5acff6
  • SHA256 68a1452172636b081873b9f7c1ae3794035c4ff50d5538b656caf07016b74d07
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.clem.isisnews
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4930

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.clem.isisnews/app_webview/Cookies
        • Size 64KB
        • SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.clem.isisnews/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 775f1b233bd345718724c4587462753bb8d28b9540f2425b808e9735ab229516
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.clem.isisnews/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.clem.isisnews/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 8569e073dfe4a479abe58670b0830240b6efc0e90ce9d27a0e8360642c9b9c2c
        • MD5 SHA1 SHA512

        000001.dbtmp

        • Path /data/user/0/com.clem.isisnews/app_webview/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        000003.log

        • Path /data/user/0/com.clem.isisnews/app_webview/Local Storage/leveldb/000003.log
        • Size 832B
        • SHA256 3da14febdd5b96497badb40915414c5c749026a86f63988beec6f2acc1efea1c
        • MD5 SHA1 SHA512

        LOG

        • Path /data/user/0/com.clem.isisnews/app_webview/Local Storage/leveldb/LOG
        • Size 70B
        • SHA256 99d9bcb2854af42cae67f8e3fa6b1be6adf971774d653e99b0b46dcd2f85e8a7
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path /data/user/0/com.clem.isisnews/app_webview/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.clem.isisnews/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.clem.isisnews/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 85d2b837bd8a857c244223caf2f0fadf9f48ee8a13c692cb7e8c3f716211174e
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.clem.isisnews/app_webview/metrics_guid
        • Size 36B
        • SHA256 678f726a1f2cee37b58a8f6c015d9f27c8a819b619f83ed84e8db79af601bbdf
        • MD5 SHA1 SHA512

        1582435991586.jar

        • Path /data/user/0/com.clem.isisnews/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP

        settings.dat

        • Path /data/user/0/com.clem.isisnews/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 a3f1618ae472e905057276f0fbbc49417730a3cbd3a789dcd9821881e2885abc
        • MD5 SHA1 SHA512

        1a9f149b1f7f35b1_0

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/1a9f149b1f7f35b1_0
        • Size 10KB
        • SHA256 2d33619f3e588cfc8aefbf06dc28e8e8a240830077bc2c603994e84f4d811499
        • MD5 SHA1 SHA512 SSDEEP

        e06cc44686ac5311_0

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0
        • Size 548B
        • SHA256 67abf4ad8d326bdd6d1e2a13df0e2e5f1e37ffd0c0ec9953f3b852e5de4fd11d
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 144B
        • SHA256 8e74ffbe60a93138381f16cd2de58f2a643a6b0cd4333c4b409b69ddcc096dba
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 8f50368cc5aef89448487b0eda9bfc2faf9dbeeeab03b157872eb4112df52c67
        • MD5 SHA1 SHA512

        dfe6b2497a7513ba_0

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
        • Size 12KB
        • SHA256 5212923bc7c3afa2374553673852d63cd609613581ab6214335536cfaeac89c8
        • MD5 SHA1 SHA512 SSDEEP

        f038e94cb33282ab_0

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/f038e94cb33282ab_0
        • Size 244KB
        • SHA256 361ada4694a0c0b23fcb62e49672d8f82e8e0f4fe9f617bfea6cd013db8ec3c6
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 192B
        • SHA256 cc4fb9a2d99ea017055732193e32d0a15da423abde4c0ccd6166876d98710697
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.clem.isisnews/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 144B
        • SHA256 226694f340abd507a256264a130d97ebca2995af44dec987fcc836bde014ffbc
        • MD5 SHA1 SHA512

        favorites.db

        • Path /data/user/0/com.clem.isisnews/databases/favorites.db
        • Size 72KB
        • SHA256 48ec146267cc9893b3b393d0bc8f89f13089c88f2cbbc47b878812606899822a
        • MD5 SHA1 SHA512 SSDEEP

        favorites.db-journal

        • Path /data/user/0/com.clem.isisnews/databases/favorites.db-journal
        • Size 1KB
        • SHA256 8cb04d57f7c7fa8c415cd826fb43fbe63a53f6e1f24ac130d956f2b5c36ea5f0
        • MD5 SHA1 SHA512

        221027_180152283.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180152283.get
        • Size 191B
        • SHA256 4105fd5b55b12159540a1e2fbda34581876c238f209c2463d2231cdc35e31be1
        • MD5 SHA1 SHA512

        221027_180152623.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180152623.get
        • Size 51B
        • SHA256 2a23fee3407c777fadc6421e869db77be1ae19739e2d98a782362a6afe6001af
        • MD5 SHA1 SHA512

        221027_180152813.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180152813.get
        • Size 51B
        • SHA256 245a1b4745bb2d0a330332cffa214dbb8053d277e05f59d7e40a66e93df7feb0
        • MD5 SHA1 SHA512

        221027_180153002.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180153002.get
        • Size 51B
        • SHA256 17c89e72124c63248d66fe1374b5f32362f9de1614619c93c3a3edf0f51e8b33
        • MD5 SHA1 SHA512

        221027_180153150.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180153150.get
        • Size 51B
        • SHA256 ed97bd4b4bf594cc647b12d576e1f24439ba98ee6f1a2bd77727c0c3ae51bf0c
        • MD5 SHA1 SHA512

        221027_180154011.get

        • Path /data/user/0/com.clem.isisnews/files/221027_180154011.get
        • Size 51B
        • SHA256 92c45806e8c6efddf21b67fec86ef788567fbc411f6e1e4fc3b5316e6c029d8e
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152305.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152305.log
        • Size 352B
        • SHA256 007663c9f44b84e0bdace1504673205f0771091bfd847714711b1976e555bdb6
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152305.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152305.zip
        • Size 341B
        • SHA256 8933257649669974fcb4ee27fe034924d28e2043c7e44c4e705da7a70ad2c977
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152628.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152628.log
        • Size 256B
        • SHA256 d0c1712afea3c8c264b91e4ce45b62a0f03878e1500292047b783769895e7d75
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152628.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152628.zip
        • Size 241B
        • SHA256 555847dab9628372063c4d77c0ebebfbdbddb0a6538cc1e26462a5926c229638
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152839.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152839.log
        • Size 256B
        • SHA256 6db7b04ab0bddb8a7bcd0f51248fa68c47717bddf1b2d93c8be5a11bbe3a0a01
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180152839.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180152839.zip
        • Size 241B
        • SHA256 d700860b647f3e0bc7d74254db8d2e8d2cb2a04bd4b334d962206dc2229ab8f8
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180153093.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180153093.log
        • Size 256B
        • SHA256 a13cf07387f2448454308a6d7141dbd9ec0740fa0f4a3cd408d9b8398a5f5660
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180153093.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180153093.zip
        • Size 241B
        • SHA256 28332976b6e7aab9d2e0be7aebffc78d345e4738fc986c53135dabde3a5bb44c
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180153170.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180153170.log
        • Size 256B
        • SHA256 9e94ebc116e097579028ff23c707567be75b379a52a42b816bc23beb0bba6f10
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180153170.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180153170.zip
        • Size 241B
        • SHA256 aee7a13658d76a94827168d8085c1f68c4b69c5c5e61eeec4b7d06cfbcb4ca79
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180154031.log

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180154031.log
        • Size 256B
        • SHA256 a8a60145222372c598ff8cf49021876005f418a835cb22b0cc978fbc70024275
        • MD5 SHA1 SHA512

        dd9028baa4228323_221027_180154031.zip

        • Path /data/user/0/com.clem.isisnews/files/dd9028baa4228323_221027_180154031.zip
        • Size 241B
        • SHA256 8ab3a916e2feb32c2fb832ed97bf3cee9aae55564351404fc716da20f0fb0c77
        • MD5 SHA1 SHA512

        app-version-1

        • Path /data/user/0/com.clem.isisnews/files/storage/clementhoh/IsisNews/sync/app-version-1
        • Size 20KB
        • SHA256 0e833947ba4b9c491749f0b0bbf0b10f77932c58c4da34536c6da51154ea3cf8
        • MD5 SHA1 SHA512 SSDEEP

        filelist.obj

        • Path /data/user/0/com.clem.isisnews/files/storage/clementhoh/IsisNews/sync/filelist.obj
        • Size 1KB
        • SHA256 8871bc4b32c08ca81718a678afbf2c168d96036cf1447e2b4c3ebe201c88763f
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.clem.isisnews/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.clem.isisnews/shared_prefs/admob.xml
        • Size 133B
        • SHA256 62e5fc9a39f7657e8a451f6a5ed0e73b6aef62e438b9b86ae4b3f08ac17f9339
        • MD5 SHA1 SHA512