Resubmissions

24-11-2022 17:19

221124-vv2kgshb96 10

02-11-2022 04:24

221102-e1fl7shcf3 5

Analysis

  • max time kernel
    2863143s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24-11-2022 17:19

General

  • Target

    924a8b1d7396a7e21e026b4424fcd080.apk

  • Size

    1.9MB

  • MD5

    924a8b1d7396a7e21e026b4424fcd080

  • SHA1

    1a6193b9c349913c13d4a2aeae208c027394f9c3

  • SHA256

    b42bdfceb8e7733db22645fee95482dccf5260dcd3ff15ede0de77d2120c3845

  • SHA512

    85f75ff6075c9fac8cf91acdfc9a428667697aada2048a6b44b668478f7dfa27cc7daef368cb502700ee2b2168819540655991bdd9488ae2a8b8fdfddcc81023

  • SSDEEP

    49152:BjgmCcSRi97ERKeVrl6rMa+wTBHpEUBtgen:BcmB2ixERDVr4Ma+Ad

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.nttdocomo.cookie
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4767

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.nttdocomo.cookie/app_webview/.com.google.Chrome.SSkVCS
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.nttdocomo.cookie/app_webview/Cookies
    Filesize

    64KB

    MD5

    9b23e6a88d5a95f155f205cb04b93cd0

    SHA1

    b62dccbbef087a0731f226b96d15d35d8aa5e5fc

    SHA256

    f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

    SHA512

    bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

  • /data/user/0/com.nttdocomo.cookie/app_webview/Cookies-journal
    Filesize

    1KB

    MD5

    77cae585a8f21c6439c68303f365ad23

    SHA1

    498824427dda86f54810e0421c7481c44ea010bd

    SHA256

    64b111c83dd67a5ce01a7a4a3f752ce587e21b2fe7f4976cb5d336a4299bb07a

    SHA512

    8ea8805e3d57624c76db173b521dd8f93a825046aba58214e0b5cf7b184e953e3c7b4c3e457cbd5bfd2be01c06ff6a6c686c1874aed1bda31f1587f4244568d7

  • /data/user/0/com.nttdocomo.cookie/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.nttdocomo.cookie/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    63b2bc2d0cec539feae48d9a2c5f673f

    SHA1

    ea9deb2040f3286c60c7869da4107e6783c5e124

    SHA256

    a8378d33808ccfd564cd98685e7ed54b21c6cdc5fca45bb093bfd3b0b27a349e

    SHA512

    a01b8610219b38129fdc52529fe049d8ec3a890fd20d40bae306eb07a7adb47e8794e70d73aa8dd0d5d40e01bec9eb2ee352acda91aaa722edd25f1349e84f1b

  • /data/user/0/com.nttdocomo.cookie/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.nttdocomo.cookie/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    f8a60e3fb7df8993f44f7fca111e6286

    SHA1

    a21fc34cf48937bff21873555e2c70b252bf9167

    SHA256

    cd6a3d208e09fd2df32665946329b2316eaea987a506dd6ed472e105df83d6e8

    SHA512

    d79d3065221b05dc912a937d73c1ac6697211064e7087552399b7f702353be98f74bcaabc76d4ea5673dcb8ec53d425e292dc10bc66859c2b379d6444df2d545

  • /data/user/0/com.nttdocomo.cookie/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.nttdocomo.cookie/app_webview/metrics_guid
    Filesize

    36B

    MD5

    9f03ddd053883e21fb85e25646d3c75d

    SHA1

    d6fe0d7060bb9a71fc77d1f120f763887cad7e66

    SHA256

    50170e4951e5df5c5b3d4f600fcd8e8e9917b87df5c968459dbe857cca3940c3

    SHA512

    63303086ca4ac2d76e20ca4e16ff8e9e46c10911194815bf02f54133a68e1aac4c4088a7d7ee7ab417eb07d800401e3a3929a6ed14bf445c88c6919a944ff647

  • /data/user/0/com.nttdocomo.cookie/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.nttdocomo.cookie/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.nttdocomo.cookie/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.nttdocomo.cookie/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    5538ddb282c6dcb3731597eb5e6ef4a1

    SHA1

    449650a78205a764dbca35ed3f76bf7c85d9690a

    SHA256

    4c4ceeecb16f5b9ef22f5189925939d9060d164fd98bf0d97043f92fcffc0e0a

    SHA512

    e2e992dd1511ca482da849234515f65625a932b56f78224d8a551ff41f5fbd267ff3aa968e0f5959769d18a6ab07be64f66474b5f165b4e797c7280c82cf44be

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/4100f42d56e98391_0
    Filesize

    326B

    MD5

    0d80a95de11c4f0babae40aec69008dd

    SHA1

    2e644c0a129f981b6e5f76d2d45ae89bdb2a583e

    SHA256

    ec2d5336077c0309ffd1e9cd06791e495acdca4b308718c6859b8153eb132224

    SHA512

    52c5170555ccd6f247c6743e075602c4fa6cf774d8f6ec4f4925a1ccb06b29d9295e3a7de3b0a8998c8a381349dfe4383c9e644a58642ae07c8259a185eedb04

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    d4b985a638c321315a1fa10fb7f5491a

    SHA1

    8189068dc8d2992128e36541432e7b452d2fbae0

    SHA256

    d5a8e3cc297d72176ed9ddbe8efdafab8f35521f0de82e2630d0a6e8056619b8

    SHA512

    7b71a018435b6af0d2e87661ffb6d16437497494bc5dc37280eefd7743bcf9c2979c7eae8ce19a6eba3748d5309a1e4befe37febbea9eff31c68a5d00085b01b

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    96B

    MD5

    bbd40bd50d92932b23522ee17528a085

    SHA1

    9b2375f4b6d9062950e88cee5d179db7c1a99a45

    SHA256

    53d2898a519b95cc584c18a83722ec3f132f238d455803079298293939985f4f

    SHA512

    c1333f5ac86253a065622b45403e80cb86ec0744f3e77e5c07ee1f112521d8e91cbaebb03ca687d2c9c0c9d79de7b765fcd6a52e206b63b7cf2af91323acb535

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    144B

    MD5

    6dfab761f53a44ccbf5bb1b5c5b4016f

    SHA1

    c67be6cbea07c91cd3cbf3bbbf66ecf3a737beab

    SHA256

    c3b4004d1357bd50957017d0ead3ba4bdccad2bfc73a8dcbd2857f3014177983

    SHA512

    8967c1a094210331dba618e836c7a8527aaa37c0258bdf3e0df16924af8e30aa48a476b48eb0b2b5a0924b41fc08135546ee16349432d68611035a0fc8e2046f

  • /data/user/0/com.nttdocomo.cookie/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    96B

    MD5

    eb46b8fada1df3ca3e71e257ef45fe69

    SHA1

    d3fbb66276de83c4e5901a88ed971bffc5c09732

    SHA256

    f58a86fa0e3d181e9ab43998b633e79d174093d9db81d3256e5b8ac1b975e895

    SHA512

    9a61300b17af8706137e6868596333b037b82ef36e6a9ced96de6f485dee22eed798aea3e369d6997613359add0e2866a127d81382a62dfb89cc158f0d75bae2

  • /data/user/0/com.nttdocomo.cookie/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9