Resubmissions

24/11/2022, 17:19

221124-vv2kgshb9610

02/11/2022, 04:24

221102-e1fl7shcf35

Analysis

  • max time kernel
    912454s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    02/11/2022, 04:24

General

  • Target
    924a8b1d7396a7e21e026b4424fcd080.apk
  • Size 1.9MB
  • Sample221102-e1fl7shcf3
  • SHA256 b42bdfceb8e7733db22645fee95482dccf5260dcd3ff15ede0de77d2120c3845
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.nttdocomo.cookie
    1⤵
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4144

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Cookies
        • Size 88KB
        • SHA256 d9cbb95ca9f6b227831863a6fb2a0ef6df0c00a4bad8e40a550be1cee48a384d
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 54965324f21a7a38fd248cafdfd43fa871f96b85f5f922cff007e66cd8cafbc6
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/GPUCache/index
        • Size 20B
        • SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/GPUCache/index-dir/temp-index
        • Size 48B
        • SHA256 1bdae6fd904ff3ec0d372abed458e48569a5501acf60b0fc0f17d4842d48f5b9
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Web Data
        • Size 104KB
        • SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 faf558a4e2352d92d523bce8c318f9ebfa5fa6262e38139180f72ad0fffbfda6
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/metrics_guid
        • Size 36B
        • SHA256 66d4cb84909873a605551d927cc14561a155d5bb17cff9bdf2c533d7f42b0de9
        • MD5 SHA1 SHA512

        04c20a53d622e725_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/04c20a53d622e725_0
        • Size 12KB
        • SHA256 35b687ee08f4b514bdbe270005c056c6e43eea7d19b19ec6e66eab0fe01279b9
        • MD5 SHA1 SHA512 SSDEEP

        04c20a53d622e725_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/04c20a53d622e725_1
        • Size 108B
        • SHA256 d8abb5878328f6eb035c11644006dfdfb60da7c961d13ac9d9395892bd81518d
        • MD5 SHA1 SHA512

        05d34da3bbb16d88_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/05d34da3bbb16d88_0
        • Size 73KB
        • SHA256 c2f16d15741c8bf1b5391293a249865d68af9d0d72cb2fdb1a107975f53c10e8
        • MD5 SHA1 SHA512 SSDEEP

        05d34da3bbb16d88_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/05d34da3bbb16d88_1
        • Size 129B
        • SHA256 f032994974b2303241acc8f6a28079105f0c0aa93ad61b2706bfbf12d6f15a15
        • MD5 SHA1 SHA512

        1629ce6caa4fc4fa_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/1629ce6caa4fc4fa_0
        • Size 94KB
        • SHA256 294dd10bba3697cd7566596ace89fda50532f2b39243407d57bbfc48e37fba44
        • MD5 SHA1 SHA512 SSDEEP

        1629ce6caa4fc4fa_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/1629ce6caa4fc4fa_1
        • Size 106B
        • SHA256 d95cdd5c1689c7ec3614390b5dbb24629a90448447096ccd297fe19fde6a394e
        • MD5 SHA1 SHA512

        2940195bd9870d6e_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/2940195bd9870d6e_0
        • Size 25KB
        • SHA256 f91bc67d4f239e67a43606b6bc4db2956c185d554ad7e886e7047258b4c92ee0
        • MD5 SHA1 SHA512 SSDEEP

        2940195bd9870d6e_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/2940195bd9870d6e_1
        • Size 101B
        • SHA256 a23dd07fa93787cdd27fc1f1216918a411fd63f1767d5ded770fbd9139124af4
        • MD5 SHA1 SHA512

        391ceb97b676083d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/391ceb97b676083d_0
        • Size 82KB
        • SHA256 4184b3d6fd20fcf8ffa34f255b84ded1b69277da38809520f9301b57a31dbbad
        • MD5 SHA1 SHA512 SSDEEP

        391ceb97b676083d_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/391ceb97b676083d_1
        • Size 109B
        • SHA256 3036f5509696855a47153263405413e73718e1d1a002e6328a07b92e5f06cf09
        • MD5 SHA1 SHA512

        3caef912a47fc70f_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/3caef912a47fc70f_0
        • Size 27KB
        • SHA256 bd7f9644ec81616047ba996e10a7e025f21801c65ba9bd67ce1f866ddc4a4261
        • MD5 SHA1 SHA512 SSDEEP

        4100f42d56e98391_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/4100f42d56e98391_0
        • Size 16KB
        • SHA256 e372d9241db0b369a0b1f4ee2bee1f23e68268e33d85fe4f38c69049ffe847ef
        • MD5 SHA1 SHA512 SSDEEP

        430e829d2b858b7f_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/430e829d2b858b7f_0
        • Size 4KB
        • SHA256 1a666b5fb5323985736410d0dd637cdba7f39b22e8ba923025bb51955b19bdec
        • MD5 SHA1 SHA512 SSDEEP

        43eac0788666840d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/43eac0788666840d_0
        • Size 22KB
        • SHA256 30953690c31a9f7261f3d1a60e24b001445e6e57412a9a64bec3dadada7e5bef
        • MD5 SHA1 SHA512 SSDEEP

        43eac0788666840d_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/43eac0788666840d_1
        • Size 110B
        • SHA256 1c87299d448f5559281d1eadd631f302411cc93bcd20375641830adab38a640b
        • MD5 SHA1 SHA512

        4a5e73da836d06c1_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/4a5e73da836d06c1_0
        • Size 6KB
        • SHA256 43af967e37f993aeb5b8ed74ce2b93cf6dd453cbb3f21471de48a3926ee15364
        • MD5 SHA1 SHA512 SSDEEP

        5dc2dfdd48134519_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/5dc2dfdd48134519_0
        • Size 78KB
        • SHA256 73094b71d0cb5b76fe0ba83c5a78c441d87a7a89c17eb39a720d5e7964dd50d6
        • MD5 SHA1 SHA512 SSDEEP

        5dc2dfdd48134519_1

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/5dc2dfdd48134519_1
        • Size 129B
        • SHA256 bc340b7550a33970a658f3a4056e4ca0a1ac641de50e968042e44ab92b097e71
        • MD5 SHA1 SHA512

        6278b9e87ef1f510_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/6278b9e87ef1f510_0
        • Size 34KB
        • SHA256 84dc15ef972f24989be47d6d5d95f8beebae04cd0eb5f9486f4ba4ed20712de1
        • MD5 SHA1 SHA512 SSDEEP

        717c2e5f7992fa80_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/717c2e5f7992fa80_0
        • Size 12KB
        • SHA256 fe6ec013bcf50c55c770ff5e8c3d121aba278d7a25868f85cef5cef37bd4c339
        • MD5 SHA1 SHA512 SSDEEP

        7f484346686cbcb9_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/7f484346686cbcb9_0
        • Size 4KB
        • SHA256 2e5874c4ad6ea74ee2bdc28a7078e597716f299b7dfe888cf342af020af92d79
        • MD5 SHA1 SHA512 SSDEEP

        d68d28089287bf60_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/d68d28089287bf60_0
        • Size 4KB
        • SHA256 edc893019ef9616b30d87df06923e547482290c12538ba4f14efec3d54d2e590
        • MD5 SHA1 SHA512 SSDEEP

        edae43fec2d29653_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/edae43fec2d29653_0
        • Size 112KB
        • SHA256 f32233a04c82c5cc764eb78c5c151928c4ec9082abe7cb7178ee9ded8bf15dfc
        • MD5 SHA1 SHA512 SSDEEP

        f8502a71b1e5fae6_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/f8502a71b1e5fae6_0
        • Size 8KB
        • SHA256 d5bdc14207e0fd85d99b80cc196e37281b2bd4d72f8d62c2903eb813af8717fe
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index
        • Size 20B
        • SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 48B
        • SHA256 97c526e8ee0448f578e244be1fa8ef18a186378d1c24f804a2bf6570ebb63d0b
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 456B
        • SHA256 4a5b0a06ce232d5d080ce57b38d3457702d2964c4a5634c3bac429d5f7d9c8ab
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.nttdocomo.cookie/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
        • MD5 SHA1 SHA512