Resubmissions

27/10/2022, 16:01

221027-tgl27scff710

21/10/2022, 10:54

221021-mzjapsgegm7

Analysis

  • max time kernel
    439301s
  • max time network
    115s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/10/2022, 16:01

General

  • Target
    290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53.apk
  • Size 1.7MB
  • Sample221027-tgl27scff7
  • SHA256 290d70472f4b00a1cf01f5c1311aacffaa39057bb1c826c99419999ccef7ae53
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.ssd.vipre
    1⤵
    • Acquires the wake lock.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_analytics.db

        • Path /data/user/0/com.ssd.vipre/databases/google_analytics.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        google_analytics.db-journal

        • Path /data/user/0/com.ssd.vipre/databases/google_analytics.db-journal
        • Size 524B
        • SHA256 d784d2ec0091b0b58ecccf4e4d36545e3e047dc64600d9d30b83a533ff11366b
        • MD5 SHA1 SHA512

        google_analytics.db-shm

        • Path /data/user/0/com.ssd.vipre/databases/google_analytics.db-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512

        google_analytics.db-wal

        • Path /data/user/0/com.ssd.vipre/databases/google_analytics.db-wal
        • Size 144KB
        • SHA256 05f32ddaa997897908191d9e95b78a724f37d7732d40289a237b76f22880bf8e
        • MD5 SHA1 SHA512 SSDEEP

        shim.db

        • Path /data/user/0/com.ssd.vipre/databases/shim.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        shim.db-journal

        • Path /data/user/0/com.ssd.vipre/databases/shim.db-journal
        • Size 524B
        • SHA256 2484fed123979809a6f635f44a3df6f01b0c05586aea9f6c85a266078f4c3a4c
        • MD5 SHA1 SHA512

        shim.db-shm

        • Path /data/user/0/com.ssd.vipre/databases/shim.db-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512

        shim.db-wal

        • Path /data/user/0/com.ssd.vipre/databases/shim.db-wal
        • Size 140KB
        • SHA256 2658bee84ba4c6a14049324ec5e7aea6b5ceaca9b31700d6edf76c06fcbd3c75
        • MD5 SHA1 SHA512 SSDEEP

        221027_180209544.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180209544.get
        • Size 220B
        • SHA256 a3d51850457e43604fd23ed13bf46805645c47c400a99d3b3d711ef43451a449
        • MD5 SHA1 SHA512

        221027_180209994.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180209994.get
        • Size 51B
        • SHA256 013eead4d2f10010829291bd06668c36cf1a6d108ac191efb226baa3f1c56beb
        • MD5 SHA1 SHA512

        221027_180210157.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180210157.get
        • Size 51B
        • SHA256 1354f69523798551353c92f33d5255141071e999abc8b6a6022c39ecd0368337
        • MD5 SHA1 SHA512

        221027_180210359.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180210359.get
        • Size 51B
        • SHA256 c006c94f8cc99bd163124a1a19c62993bb46189f5507e164551641c14c269fc8
        • MD5 SHA1 SHA512

        221027_180210412.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180210412.get
        • Size 51B
        • SHA256 b25bcfdcce4b9345345f1a04abc954fa5b35f26078615d944e78c3a073a0d012
        • MD5 SHA1 SHA512

        221027_180212512.get

        • Path /data/user/0/com.ssd.vipre/files/221027_180212512.get
        • Size 51B
        • SHA256 56b6611f85dc410464554d1000cc61ee8453ecc66a98a3fcf5d66aea873ffb32
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180209552.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180209552.log
        • Size 368B
        • SHA256 be727e3fbfe6c06ac62d06e3fd28b63a318ec74c3a353ec1e5565e46bb3969c3
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180209552.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180209552.zip
        • Size 361B
        • SHA256 57b2078f4d3bcef9395dc2880a6ceb87ac79783953430f71618d7df107907576
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210000.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210000.log
        • Size 256B
        • SHA256 5682486aafea5f7649a0114340763eb5e1e3df09c31723e140f66ec1b479958b
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210000.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210000.zip
        • Size 241B
        • SHA256 5a45794bd2c368551ac04c749885f8c9e62f7d990868debd2c0e46a2bf1d3434
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210160.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210160.log
        • Size 256B
        • SHA256 3cb3c6f0489450865b6b78c1b2a08dc74479990584ad7b2446f57852204facda
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210160.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210160.zip
        • Size 241B
        • SHA256 e02e410bd9943221d1089430dc6df0a0cd19f4cb4bca7f5bbc74bdecc462981b
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210361.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210361.log
        • Size 256B
        • SHA256 364488119758c8db0d93b79af9a5ff563cabc0bff1ee0dbcafacbf5e57742b68
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210361.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210361.zip
        • Size 241B
        • SHA256 a331618b2b30a2e5dfb1d4d841c8868103dd6c93005517ba4112b4491d61a67a
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210427.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210427.log
        • Size 256B
        • SHA256 dd00062e872b9a9058e819b399dfde5341ce7e6166951cc2fb63a18bf052b887
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180210427.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180210427.zip
        • Size 241B
        • SHA256 2c8a6d9bc4838185f9176a97d548725cb59e79baf48c1ae49cbb4865f79304b3
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180212518.log

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180212518.log
        • Size 256B
        • SHA256 c284d8e5d7f3e692d8061126bb444ea55d607869d7c02c237c769d368e506187
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180212518.zip

        • Path /data/user/0/com.ssd.vipre/files/25bcdf6401de672f_221027_180212518.zip
        • Size 241B
        • SHA256 16eb49a8083608e88c32d265be86cff9e420ca51a342c782e4a76fad373b579e
        • MD5 SHA1 SHA512

        com.ssd.vipre_preferences.xml

        • Path /data/user/0/com.ssd.vipre/shared_prefs/com.ssd.vipre_preferences.xml
        • Size 118B
        • SHA256 f63cbe30324e9e326ebaa43262b0af4e94638dba833cf1d3fddad28233f1b93a
        • MD5 SHA1 SHA512

        com.ssd.vipre_preferences.xml

        • Path /data/user/0/com.ssd.vipre/shared_prefs/com.ssd.vipre_preferences.xml
        • Size 197B
        • SHA256 a40ea7a6c57438cd16819ba63ad86f7e51a51cfc855b0695082d4597bd1445fe
        • MD5 SHA1 SHA512

        eula.xml

        • Path /data/user/0/com.ssd.vipre/shared_prefs/eula.xml
        • Size 120B
        • SHA256 e1058a542852e2a0710ef0e2804236f0e9299033468f775200568ac3708f6299
        • MD5 SHA1 SHA512