Resubmissions

31-10-2022 16:21

221031-ttnrkaccdp 10

31-08-2022 14:05

220831-rdtlrsfcej 10

Analysis

  • max time kernel
    786047s
  • max time network
    46s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    31-10-2022 16:21

General

  • Target

    divar.apk

  • Size

    2.3MB

  • MD5

    9082147d32ce71e3da1469bd9a0cdff9

  • SHA1

    2db449cb6fc44b39f0e38d628c5fe72a056f35fd

  • SHA256

    cd3720fcdfb015b745e1a560ce5f4ed198d5a8afe79c0cf7bdecb7c47e33455e

  • SHA512

    26e536bbfc943e4a71e3dc4201fdd19a54274974171e46902d4d55261267dc2b767bf5da0966e1988488a3d092ce558dd85ebb93adb9d70359eb1df59ad7c25a

  • SSDEEP

    49152:A/Yyeit+zalch6z5Oz2vpqLwR6L2zsq7IlVCxd0qAnibUO74kg:OYyeit+za+2chLU6L19lw0qDUO+

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.psiphon3
    1⤵
      PID:4726
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4939

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.psiphon3/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/com.psiphon3/databases/crash_reports

        Filesize

        168KB

        MD5

        4bf4950dec734449a9eee1566da20f86

        SHA1

        a42a12cbd3bb2b86fe0670816599903a7357ab5f

        SHA256

        ae95bd24d25e2012fc1ae673e3a70f70ca641088bedf146a29438db7f4827629

        SHA512

        f4b631d7ba7db7c8e612a7dcda55d4379f28774c392ee55aeb7cf8bdeb5e4f96ea56ac7a5f6c8577a686ed773e3de82b68c4075c585733cca4226a2e6b8962e8

      • /data/user/0/com.psiphon3/databases/crash_reports-journal

        Filesize

        1KB

        MD5

        a5d662bf4749d837fdf3ae9e045733ae

        SHA1

        9ac1725fe13eceeabe3f4cee047b6c3a947a16b9

        SHA256

        9832f714a0124ff86b06af26bc06234c2785a4bed886763c3999602b34f09e65

        SHA512

        cbbccc296cf5bb21fdc6dc0a60163c11c067956aadd77e8c43b773ecfeadb7a69f0fdf79470888c8e543acba78d5f368f683f8152b9ceb43d7eaea8e7dee44cc

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        ffb2ea3d183288e3b3a73f5682e76822

        SHA1

        23ee8f3d5a265a26a67ef9ed67ac49a25d0ca28e

        SHA256

        29505b025851319bcc1a656d275e028ffd550990e42cdab79126a8aae2ce4801

        SHA512

        b0651b384ecfe8fd05c01c77822e9976a5f881a68287ca270071f11b7439d4c5c869525509596e8fe6b4cc3b84952ea2f1c10426040a422a58e33aaa57e23861

      • /data/user/0/com.psiphon3/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        f18bc6cb797e07911c849f04f61275ea

        SHA1

        d91ba4d7c6639819c538c6766c9ffaab2a7c8b34

        SHA256

        30f396cece544b403a092772324f670b14e65c3e139c4d6957e88bbdcff8f43c

        SHA512

        00f1a416eac98ec8c56a48c95e236ba851f413b86beee33b9b5f7a5c0f700780e53abc7849be0a779408ddd688812ec25232ed3957a0da9ce127ab3648372d10

      • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_send_report_to_server.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/files/firebase_inter_process_mutex-lock_write_report_to_sqlite.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        c03b1325886384a0feb4719ab15c20b7

        SHA1

        5a4c34bd2c5857e031d5356d852a7a69e24d5c13

        SHA256

        4170b9f4453c9fc644efbc3f201dfa8d3014b5c544f7289567b442289358bfc2

        SHA512

        70a974cc15c28f78dd5cf36b4a42aba7b2babcdfaaf39883f4e0cc44e7f0d4358f506608f69e05f27192cd21f906dc21515c4ee0f1c2256bb9e5b1488a72840b

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        81965eacf5e95367ea6e74266ea44538

        SHA1

        eb7814e42e30bcef49b5f018557b4780d62a2b65

        SHA256

        6e2746844bc050ee8227960bd5ae8263248b7b982b02c23a8d1694c0307820f4

        SHA512

        302f187de140d72b44753c62432eb601f069df801e6b9fa2d3e9b9ecc55b61ab05d16b68dde14e0bba6dbc84e58b6a6a7315ae6ac5c417f018d2a47d237e4417

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        08c6e8b623fd703f7b39e19adb3d25f3

        SHA1

        e84be49c8918a2d2390e59a6ff1e890ba20ed8ba

        SHA256

        8fe116cbc7cf0d11fff69aee8f969c45457733f90bedb6560ec9903623a1f2bc

        SHA512

        b6155c8eecfe17182da25baedcae53e19782ece4c248984e675084bf92ef7ec084ddd2115ed9c61f055a43d048b62beb5ceb1c9c701b704a1f8d22e3f56e3d0b

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        2KB

        MD5

        613864e7d947340e581d54e563839975

        SHA1

        19e20fd1c09d3223056c53cf696295f24ceffa16

        SHA256

        679b7b07356d2f16dec849924672210f28715f7dba473ea2dd8a8468fc2c313a

        SHA512

        30e66f41c9534e248931d54336e11d1d28476236c156ed4dcc18abdadfaad374766b7dc9f9e1b9d2190b472dba18a6a18320a6c1ecc57a9b8fcbc2510b6d43b8

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        521B

        MD5

        6e9065bec75690f9d0e4ee14f0b9e67d

        SHA1

        84562a5381fb7ea7a820aed8695b09fbd87725a2

        SHA256

        c6afe8f806f2d422914d457f9cb3741fdb6dcc7933902c8c5cd25d2fc6008a0a

        SHA512

        023845ea480957ddeb933d40a97c0bca93b0f1a79ccfb0cbf82b498f0655f8270ff8280a8395e442b480d8c9b75d18b6bf60cc1ec2c03a50121bc324132f7b27

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        361B

        MD5

        96b2a64f7dd3e3fc7ccab6d290278e4c

        SHA1

        8b64260c00b4be4f3f173d0aabce66b95c5bd576

        SHA256

        d9e57be0344f17c3a9255ae006c2dafd18dd10150e693faa1d1fd65086722d1e

        SHA512

        51cd45d87540ac5eafc963c930ffbc660588942633a845584abdb8673c74d30575a08f7a3645db5d296d8abd572b5dd9b94fca5ff710537416335a5cb8cba571

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        457B

        MD5

        abdb48fe9d26b8e14754edf41b08a1a1

        SHA1

        f6f72494873d5e1d786fe321f19f80c559988491

        SHA256

        2a689043c4b1dba75d91a5ceb54346d74bf4f7fb561c37369a2bdc7c96782176

        SHA512

        c9ddcefd1f09d93da461e9bc1e07f71e01df60751022eff40f70d7f5aecbf28a5eecaf4e8a43235690fd814c187e628c96519565c4ba14d878f39990605f0d55

      • /data/user/0/com.psiphon3/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        520B

        MD5

        2c1f393099d510301ac791c80ca8cc00

        SHA1

        b053aa510bf814243fcebf19ddd73c45a059a8f6

        SHA256

        13cb103e80f7461b5d2e829839ea8b628d19455a48a1f4c2fcb73bab28f1ef51

        SHA512

        ffe140defde9795d9a991a1231fa0ed211e45de65b723e331d595e3342877154ed92e53542006217827cd02106fb038ec395863c06baf4c1c7fd5034c2f4b0bd