Resubmissions

24/11/2022, 17:19

221124-vv2kgshb9610

02/11/2022, 04:24

221102-e1fl7shcf35

Analysis

  • max time kernel
    916176s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    02/11/2022, 04:24

General

  • Target
    924a8b1d7396a7e21e026b4424fcd080.apk
  • Size 1.9MB
  • Sample221102-e1fl7shcf3
  • SHA256 b42bdfceb8e7733db22645fee95482dccf5260dcd3ff15ede0de77d2120c3845
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.nttdocomo.cookie
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4449

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/Cookies
        • Size 88KB
        • SHA256 0fca58578afef57f4f6d09b0644e7e9ccd1cd5ce1769ed70118b15ae212a9c2a
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 109a5914670d092fd366ee8046b0e31bbd5a004b107185c556343c41736b0d91
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 0b00b55abc3279abee04623e807918f0380e26a448897ecc7cdaf387d77b6cc4
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 9d558c9abe506313e169a9699c5367b52dc83377dfe7937d7bab48726a03baaf
        • MD5 SHA1 SHA512

        webview_data.lock

        • Path /data/user/0/com.nttdocomo.cookie/app_webview/webview_data.lock
        • Size 26B
        • SHA256 df19fbf7ad880e28368b417cb90e75298841f746c6e7240964cafa7abb4433c2
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 0be84807490f135d2e023b21888048e97f81e1cfab7f92a6fc632500e2d1460b
        • MD5 SHA1 SHA512

        02f64ed8829e462e_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/02f64ed8829e462e_0
        • Size 696B
        • SHA256 80c782ccaa7f32923bbeaa8513c9ae56232aed18430c848776edda6b7a0ef953
        • MD5 SHA1 SHA512

        043a22b845e5597d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/043a22b845e5597d_0
        • Size 1KB
        • SHA256 ac5802f5bf139f4c389d1dd56cf0f5c404f78e856826634a8d1f38e2129f5e15
        • MD5 SHA1 SHA512

        04c20a53d622e725_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/04c20a53d622e725_0
        • Size 25KB
        • SHA256 4e8056ddab2d5769e9b7692651d38b3c948d15a0e953030028ab07dd2f7d76ae
        • MD5 SHA1 SHA512 SSDEEP

        05d34da3bbb16d88_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/05d34da3bbb16d88_0
        • Size 144KB
        • SHA256 e193dc1c9dd12ca1f379b9a6fc81c5a1572cc8bd943173fb00870594e9cdd996
        • MD5 SHA1 SHA512 SSDEEP

        1629ce6caa4fc4fa_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/1629ce6caa4fc4fa_0
        • Size 189KB
        • SHA256 d68526d2234f65f6e17f5fbabe3cac2af4a18116b3d33bb7b99c8966f0d18ea3
        • MD5 SHA1 SHA512 SSDEEP

        2940195bd9870d6e_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/2940195bd9870d6e_0
        • Size 298B
        • SHA256 6cf8d13e888036049a86679fa7ddd3e064cdfb389178c662a83b089c814f17ac
        • MD5 SHA1 SHA512

        391ceb97b676083d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/391ceb97b676083d_0
        • Size 162KB
        • SHA256 39cca3832a3682256c6a1bb57704933a771eca44c437bc98ebbf6052c23c2aee
        • MD5 SHA1 SHA512 SSDEEP

        3caef912a47fc70f_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/3caef912a47fc70f_0
        • Size 54KB
        • SHA256 7e564ad6dfb2341d805f733237c89ce5bf91d2cf323a18632afb6dc77e3ba707
        • MD5 SHA1 SHA512 SSDEEP

        4100f42d56e98391_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/4100f42d56e98391_0
        • Size 32KB
        • SHA256 8f17d90167ee4818508ccc27925af94c5e55de0bdfdc608542ce19ad5dbdf246
        • MD5 SHA1 SHA512 SSDEEP

        430e829d2b858b7f_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/430e829d2b858b7f_0
        • Size 10KB
        • SHA256 8294da692554438bb1030bfe3d455699127d55e80b5a5b8e9d71fa4c76491080
        • MD5 SHA1 SHA512 SSDEEP

        43eac0788666840d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/43eac0788666840d_0
        • Size 45KB
        • SHA256 7ea2f94602b66451655e8b31d070cb9309b59eceab8b2644446ef6463fc10a2c
        • MD5 SHA1 SHA512 SSDEEP

        4a5e73da836d06c1_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/4a5e73da836d06c1_0
        • Size 12KB
        • SHA256 0061147adb840bff3bdcbdad2498187f779a95ca9bce746861c26c61f220ab43
        • MD5 SHA1 SHA512 SSDEEP

        5dc2dfdd48134519_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/5dc2dfdd48134519_0
        • Size 154KB
        • SHA256 d9cc495cde3f810f20dc9a720f2c202e6bf4dc6ccc1bc14ffa681366c3482bee
        • MD5 SHA1 SHA512 SSDEEP

        6278b9e87ef1f510_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/6278b9e87ef1f510_0
        • Size 69KB
        • SHA256 7800d1b08e9935b1d55dbdbaa3ff0c4be4fa763b08f00af3bad36662d41aea74
        • MD5 SHA1 SHA512 SSDEEP

        7158bab8f493b0a7_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/7158bab8f493b0a7_0
        • Size 498B
        • SHA256 fa0281d0520a9efc1c7b5e51f78f0c9fa9ffc6dcd97b2223d653fee4731f0b56
        • MD5 SHA1 SHA512

        717c2e5f7992fa80_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/717c2e5f7992fa80_0
        • Size 25KB
        • SHA256 7757693a6e75bab5153baf9852ad1ada62dbd7fac13cb98645fce31f81465bf4
        • MD5 SHA1 SHA512 SSDEEP

        7f484346686cbcb9_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/7f484346686cbcb9_0
        • Size 9KB
        • SHA256 81ef0b86f49876341b5e353bf3140d7fc842055aa0146d1d40a8afcc0a34deb4
        • MD5 SHA1 SHA512 SSDEEP

        924a65484b848e0b_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/924a65484b848e0b_0
        • Size 496B
        • SHA256 b734e47dbf2d4c5231851fbbcb4d828b0a8a6180c6476f8c474a5200ae4b8f15
        • MD5 SHA1 SHA512

        332a118fbd7b97a7_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/332a118fbd7b97a7_0
        • Size 382B
        • SHA256 e5127a4b946d8e8c1422bb0f598b4cbee6ba5a8bbdc693c661232ae2cd995867
        • MD5 SHA1 SHA512

        5678bbaaf827562e_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/5678bbaaf827562e_0
        • Size 384B
        • SHA256 e06ccc68236e60ee6ffadeafa3ff61571a2da5ce99a6e2aa7c939c9172b2b377
        • MD5 SHA1 SHA512

        613292a465d54508_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/613292a465d54508_0
        • Size 422B
        • SHA256 2a8b5944cd05707feabb1f2e9610dc07ae708f7a27e0d5854d842f05d01001c3
        • MD5 SHA1 SHA512

        6a15dbdf7634985f_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/6a15dbdf7634985f_0
        • Size 422B
        • SHA256 7e85ea1dba02328c477d9269d7d4b7bfa0df1b78fe8645e9b954fe650cd8bd78
        • MD5 SHA1 SHA512

        87448360db0e588d_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/87448360db0e588d_0
        • Size 380B
        • SHA256 5c6bc82725d2b417ca2b1a7cb1b0d8521cf1631af6fe02514b53e1447cc4c626
        • MD5 SHA1 SHA512

        dfa85165601cbe43_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/dfa85165601cbe43_0
        • Size 376B
        • SHA256 6c5d5483092476530b8aa0288399d91d78572036f49c3ca002aca4ef7d347222
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 340f088d809126ab8965dbcf323480f52871ab1d2a6713e2e5df70e1205a37dc
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 384B
        • SHA256 22eacb3d3d8fc0e5ec097a8a1fc8c4204c2b5fea1c79b854bdef68a5e9b2f24f
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 3a0b6dac25decbe01e6d60597906edbddf5765e1d8a5ef4acb820362df63d864
        • MD5 SHA1 SHA512

        ba5aa6b9a4980fd9_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/ba5aa6b9a4980fd9_0
        • Size 694B
        • SHA256 047c395b944229794c295dd8a058bcf01958fa26fb49e4886b246910b1075c59
        • MD5 SHA1 SHA512

        d68d28089287bf60_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/d68d28089287bf60_0
        • Size 9KB
        • SHA256 b2fca42db5a0ff3d5860fddb1fec74448a9bff15764c5766e3798b6a92cbbc34
        • MD5 SHA1 SHA512 SSDEEP

        dc97767a068be054_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/dc97767a068be054_0
        • Size 498B
        • SHA256 8486bedb8060290e38a05219d18a60f4bd2845a07749c62a541bcef3685d4528
        • MD5 SHA1 SHA512

        edae43fec2d29653_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/edae43fec2d29653_0
        • Size 224KB
        • SHA256 796adc7a31143e188613a7c6b0d70ce84fd8d96dcef92271c41bef8518f69b3e
        • MD5 SHA1 SHA512 SSDEEP

        f8502a71b1e5fae6_0

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/f8502a71b1e5fae6_0
        • Size 16KB
        • SHA256 fed61bb699da19d06af89757e05b36f1b8a85c3f048a3b3ce0021b3cb6cf4672
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 236d2735f1382d0963b3768258d364743c23cd9e20856e349c26b33ff044d5be
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 864B
        • SHA256 43ac5a7a8d9266b31901f4fcb4b6afd404195570f6ff04780ef3e489e5623e67
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.nttdocomo.cookie/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.nttdocomo.cookie/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512