Analysis

  • max time kernel
    1458826s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    08-11-2022 11:13

General

  • Target

    63e606cf643dea4a7434b391e450537285d221d5fbba4400f6c9172ac7e8c308.apk

  • Size

    3.9MB

  • MD5

    fb16ce7216ef97e8ac60c73f74d104a5

  • SHA1

    7b4628a1166690fdb008655b4928c6a895a700ae

  • SHA256

    63e606cf643dea4a7434b391e450537285d221d5fbba4400f6c9172ac7e8c308

  • SHA512

    c480b0c19cc3511993bf0a66f5694815d32b59669ea0f79ca49e4ba42f5d31e4c97a58d0010a0f3e9dc5f1f62c6de00c365072ee9229a737d8e1c5df6e6be7d3

  • SSDEEP

    98304:QhJC9HmLBxqZFgot6WcdB1bld6r/yJNzfrPaag:QhJiHmLBA3ZYWild6r6Jq

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4799
  • com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7:BackgroundService
    1⤵
      PID:4967

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      d42ac7c3dd60341e9a10e5822e09dd1a

      SHA1

      e50a7f569e0cb19669f3f4c3b976a61e8a742a93

      SHA256

      d379e57253c7f7711ce608dd124a381135d2374382fc8c11294e674d67407948

      SHA512

      6403f945a8849a625f97a009776462c384a7765b21ceabcb9414a939d392335f30d846589489c6d129bbc4f3e2cc4fe06bdac26b5fc764cdc6aac2d2e8227b6b

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      12e70e8f19e142c233b2a67309eb8641

      SHA1

      906e44519f746b144462766683c642497deca212

      SHA256

      160b68ea9da1648b6705f0004b8c08cb7d3c3e8011476e1e089f4c79a6848eaa

      SHA512

      ee7ae00c232240621483297f56430a3a54732e1791a1cb06174716efa6266ff4e4c403ea962b3fd649361ff61efc2c7fee2516c412b02b67a332fe3301d81f1d

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/metrics_guid

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/metrics_guid

      Filesize

      36B

      MD5

      139b7c0d48f6829b17dd9a733a081eed

      SHA1

      38b43066393b9618feacb6cd7d02c09504104c96

      SHA256

      2e880b0ccfa760f63e739a4b8c4924e1e1c2e389916b99b153233871528de045

      SHA512

      bb715cd6c6ebc4dc9ae271661c5180c9c386ca3a37596e27f3c0b904f2b98c3b40f216319469c87eb2531985f2fef9428b7c609da133c71c48ea51a7547bf792

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/variations_seed_new

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/variations_stamp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/app_webview/webview_data.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      8cb999667fa2b45f881bf511a61fae66

      SHA1

      264a23f840295ab77a39cbdbffcca4e595c41e2d

      SHA256

      0ff3ddc7ff2656e9d02b45ab9956c04d16932f682fe0448969b488cd3fa4137e

      SHA512

      49046d4e08954f2fb6f1cdbd962e94bcac64187df17c6a4a45ab2081f88beea18d6df824ee840c3c4dfc12ae635dca7234453721930c6796c975d4f7430bd442

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      193b481dee65f14f665b26753ee2bcb7

      SHA1

      6e8e4897cce4874655078844371fe4bd5b0c5d1e

      SHA256

      e1b812ec22fa7a3c4338640b22b95cffff3d347541588807b764bec1cbbab8d6

      SHA512

      a925160563e4493a1031e3518bc1330e7e0ed3281a87d3faef2d465b98ef8ebe6716f87d46799962a1a48f993b5a859a2a3e0d5d7613c5a3ad8d22b20f196611

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/databases/database.db

      Filesize

      112KB

      MD5

      e66abb8db544654b1d41c5346d4f2d1c

      SHA1

      16f6916ab7d033baf00f3479ecdfcee4bf56fdb2

      SHA256

      c672c9bf6e26dcace5369a91b8199902d72ab3b3a835d0b26c8fc0f59ac7c4cf

      SHA512

      98b249e9042e7933ef3d497568e0fe07181326a2d0455baee43500e17283168decea9654ac50b5307955295a1704ef13f8b30850b5a9d0a4eb586efcacde1adb

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/databases/database.db-journal

      Filesize

      1KB

      MD5

      54abc70e35efd13ee1fcb053588a34d9

      SHA1

      41a52d2626b5a20773582e148026b1b86993bd71

      SHA256

      bd7e17c333312bf134c6a01a8f52210a4f6be9829b91cbd427ec6613f3716ce9

      SHA512

      4188906e11fdba0f68d0921f6b95c3f7a625e683091c622e9855d35c120404cbd3d41a42a50f140b5945a5710d4a08607475ba3dcdad21c3ddfc5961fc8891c3

    • /data/user/0/com.kmwxjeafdtvgsudtae1hwuo9m2zi.ymedltjgsba7/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9