Resubmissions

24/11/2022, 17:19

221124-vv4d3shb9910

02/11/2022, 04:21

221102-ey155ahcc55

Analysis

  • max time kernel
    915672s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    02/11/2022, 04:21

General

  • Target
    cf8e1c24065c6af0d2c64c8e454dc808.apk
  • Size 1.9MB
  • Sample221102-ey155ahcc5
  • SHA256 a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.zrwilvjx.myikbhif
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4591

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies
        • Size 88KB
        • SHA256 76c9f3aabd85cb125265185d38a8405bcf659d7fcfcaebd0084ead18170baf6f
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 73302b0d6250566217ccf26f398c709f93d0c6bebabcc5ac4466dae259096d62
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 adbaabc97b9330c6adc3f6b96d59d0c951d085f4255231d868776c786868ddd7
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 eec5a5e729ddb3dc2cbc363d0f1b5a4375c615d404ec9c17da3e35c540680b05
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 db2acabb58a17594294aeade1a279ad332ea58f23503fbe20f15d275a8763eea
        • MD5 SHA1 SHA512

        04c20a53d622e725_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/04c20a53d622e725_0
        • Size 25KB
        • SHA256 ec1ebbc784281722fc5a29aff65e1d5b9a601cdc6ee6f0e237c1c10f0dfe522f
        • MD5 SHA1 SHA512 SSDEEP

        05d34da3bbb16d88_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/05d34da3bbb16d88_0
        • Size 144KB
        • SHA256 a7e0e5d828988251c338735e35f2c973c6931a083696242ba67e71efb49bfaae
        • MD5 SHA1 SHA512 SSDEEP

        1629ce6caa4fc4fa_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/1629ce6caa4fc4fa_0
        • Size 189KB
        • SHA256 f1042c4ba6c8ce61c76a40c66c69dd05ee733cb2b5e728d9c712638ab8cfd0db
        • MD5 SHA1 SHA512 SSDEEP

        2940195bd9870d6e_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/2940195bd9870d6e_0
        • Size 298B
        • SHA256 6cf8d13e888036049a86679fa7ddd3e064cdfb389178c662a83b089c814f17ac
        • MD5 SHA1 SHA512

        391ceb97b676083d_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/391ceb97b676083d_0
        • Size 162KB
        • SHA256 433566b2ca2dcf2cec87c395b874d2be4f61e54499ace1e756c3a9a514b4085f
        • MD5 SHA1 SHA512 SSDEEP

        3caef912a47fc70f_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/3caef912a47fc70f_0
        • Size 54KB
        • SHA256 aa5fbf0b1745e8f80a5a90b45160fa630b51618d1856916a2c01b94775f5d31c
        • MD5 SHA1 SHA512 SSDEEP

        4100f42d56e98391_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/4100f42d56e98391_0
        • Size 32KB
        • SHA256 268a77195c6b2e103150082532a36940334576caac04e2a3db3834e8ab4f116c
        • MD5 SHA1 SHA512 SSDEEP

        430e829d2b858b7f_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/430e829d2b858b7f_0
        • Size 10KB
        • SHA256 a3ed9525d76b0d7f91dc4fe6cf83d182eb704823a1bb33950bad8582f53f0096
        • MD5 SHA1 SHA512 SSDEEP

        43eac0788666840d_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/43eac0788666840d_0
        • Size 45KB
        • SHA256 c7d6a75c6fa5dc0589e6d699c500d20b92b1063b26f392cf5a5e74f5fe2225ba
        • MD5 SHA1 SHA512 SSDEEP

        4a5e73da836d06c1_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/4a5e73da836d06c1_0
        • Size 12KB
        • SHA256 32108c787b0b88ebd9217fe065d1999e2350eb8d53339b6f5dd3f023a556e50e
        • MD5 SHA1 SHA512 SSDEEP

        5dc2dfdd48134519_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/5dc2dfdd48134519_0
        • Size 154KB
        • SHA256 110423de209841e9e3d81dff764f96915595ea0d47a3e6b381a47e453bc9fac1
        • MD5 SHA1 SHA512 SSDEEP

        6278b9e87ef1f510_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/6278b9e87ef1f510_0
        • Size 69KB
        • SHA256 9df043623619816cb7639ad73e673008eb445274eb63c7e39f0875d324387529
        • MD5 SHA1 SHA512 SSDEEP

        717c2e5f7992fa80_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/717c2e5f7992fa80_0
        • Size 25KB
        • SHA256 d7063eeec9c7b21b066209eeabcd0858bc02bedda9ba74529cb7755bf115d682
        • MD5 SHA1 SHA512 SSDEEP

        7f484346686cbcb9_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/7f484346686cbcb9_0
        • Size 9KB
        • SHA256 91e3d34b439e667e266cbc7331a2f5dc9ec4ba6f9acb059c0afb7f608c8d2a41
        • MD5 SHA1 SHA512 SSDEEP

        332a118fbd7b97a7_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/332a118fbd7b97a7_0
        • Size 382B
        • SHA256 14fb8ecd3b9860ed518e8299c2bd067cbfe58962bd21940b1a4a939d1e6c23a3
        • MD5 SHA1 SHA512

        5678bbaaf827562e_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/5678bbaaf827562e_0
        • Size 384B
        • SHA256 be5f437994d085a9784c13158ff1e66b83987e28b5a85ef337f710511fc5e0af
        • MD5 SHA1 SHA512

        613292a465d54508_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/613292a465d54508_0
        • Size 422B
        • SHA256 5c7127818977fae007434ba4df13847b44ba7b6911dc0faf647386833a3567bd
        • MD5 SHA1 SHA512

        6a15dbdf7634985f_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/6a15dbdf7634985f_0
        • Size 422B
        • SHA256 18e4580c531c89ef928f6e9c5320e54416cabc9a80a75c951a3ace54bce0558b
        • MD5 SHA1 SHA512

        87448360db0e588d_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/87448360db0e588d_0
        • Size 380B
        • SHA256 c4aa05798aceb15716e54effdb41c830cf7586f9211a5d857558c08f36dd9f9b
        • MD5 SHA1 SHA512

        dfa85165601cbe43_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/dfa85165601cbe43_0
        • Size 376B
        • SHA256 0dc332a5e1a36174060705fd972fc3d1c9c924088c269577921944b3b79650bd
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 374b961e3d21adda66696b28c50cbeed41140d087c8c38ee8aba27eab066f774
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 384B
        • SHA256 e99cba9fe06efb25faa2acea24c436e42383b65f1fbb55b12992ab776bd9a79b
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 76ace4e5f2007c1a39adc75560348b6fa83ad29f617203988c7060c0d06b2a71
        • MD5 SHA1 SHA512

        d68d28089287bf60_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/d68d28089287bf60_0
        • Size 9KB
        • SHA256 6c52f1a8de4e1caed93d0fb40403557390616a3fc02f33e1362b5df9ca5cbba2
        • MD5 SHA1 SHA512 SSDEEP

        edae43fec2d29653_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/edae43fec2d29653_0
        • Size 224KB
        • SHA256 9e62a44cee578f4ff8a9bebc68412f3cf9717ad9eeecc5335d19a06de46ba9b0
        • MD5 SHA1 SHA512 SSDEEP

        f8502a71b1e5fae6_0

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/f8502a71b1e5fae6_0
        • Size 16KB
        • SHA256 96c6cd17d03f565e19c42baa233c6b5176b0916df1d704fc21b66fc05303b919
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 cc1b56253fad760b4bd5f595c2b2614377849782e5a2cf2fcffd74b9a6b99292
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 864B
        • SHA256 22055965aee2867c54467189d29a1edb1cdbf44b99b93eb7f206c0a80d677af3
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP