Analysis
- max time kernel
2863212s - max time network
166s - platform
android_x64 - resource
android-x64-arm64-20220823-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system - submitted
24/11/2022, 17:19
Behavioral task
behavioral1
Sample
cf8e1c24065c6af0d2c64c8e454dc808.apk
Resource
android-x86-arm-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf8e1c24065c6af0d2c64c8e454dc808.apk
Resource
android-x64-20220823-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
cf8e1c24065c6af0d2c64c8e454dc808.apk
Resource
android-x64-arm64-20220823-en
1 signatures
150 seconds
General
- Target cf8e1c24065c6af0d2c64c8e454dc808.apk
- Size 1.9MB
- Sample221124-vv4d3shb99
- SHA256 a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798
- MD5 cf8e1c24065c6af0d2c64c8e454dc808
- SHA1 e2f5c145d78ea874ed2db9e99e7428e16c580860
- SHA512 3e1fdd6b2a4039c2e57cabab82d95cfb7e2b651e99e896cc9a1d14b1fed6e849f0aca586db1c573ea13070681782b9dcdf1198fe7b01f635925b0ace69a9e215
- SSDEEP 49152:7eNdbyBQvhSYzrEI4nZTJQnoJuXpEUByge1:7eNMQ0znZ6oJu5E
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.zrwilvjx.myikbhif
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies
- Size 64KB
- SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
- MD5 dfb2098ca7b3bf16d6f5f1e7d3839af5
- SHA1 ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
- SHA512 fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
- SSDEEP 48:T6YA9pU06YA9pU41+Pq6kLOpEO5J/Knb1pU06kLOpEO5J/Knb1pU:OYAsYAo0Nwi3Nwi
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies-journal
- Size 1KB
- SHA256 171ad8f37af05e625a5949bd59a0cb1065a58457711085cf2c6076338ee22410
- MD5 d46d17eaea26daf8b0fa0fe314fcdffb
- SHA1 5adec47c71f945b3d4ef9d6d170eec43f52b2fac
- SHA512 cf292796870f7beab5d522a0178f912c1b67820389bce4e9cc0f55e1841ad277addb51f12b1bf761e95d9a04145911219a1b398a9c579ebfd25cf2fce26f46dc
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 521a1994162f610410f40798a2c55922e7aaf6d9da5076279fd11263c63825fe
- MD5 e1f6739d634cff9db238936f92d104a0
- SHA1 f7b607cf18cfadfc25af77202411342563d8edd5
- SHA512 b4aae388f93a7cf2680a29d7b5ce7c126d113d46cf3e3c2441a627ed35a65e4d2603355a60dc3161be35e9bb3f9d4017bd7d85e30cad0d4ca27974ea94193eaa
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data
- Size 120KB
- SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
- MD5 a48cd9324b1f8754b07f00d863b840f3
- SHA1 11c6614775b35a58f440971dfc87c8aaac6d6173
- SHA512 35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
- SSDEEP 96:yo16Cd9+Lkq26iznWTge+16Cd9+Lkq26iznWTgenaBdUDN1uKdlXfnaBdUDN1uK+:yo1/MTgF1/MTgzQfMQfzbTTBbTTk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data-journal
- Size 2KB
- SHA256 63fa060b6214e19bdc51eb262201f704cc9cdddd486168d3ea836190db66be34
- MD5 b478f16edd5f77dc8385bf0db1583d63
- SHA1 6ef668d0c50f9953c1f63d42d684944699748aad
- SHA512 53f3245a330e6aaa5aae10793f88f44fefd014078f78c3481bce9da65bfa8127828bdbd5c39a9000187428f2f55247b9662a2fffd9a0586f01104c2ac44755f2
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/app_webview/webview_data.lock
- Size 27B
- SHA256 7462921589111575cdfa435e562abd5911f5b9bcfdae73f9682e0cd7a98fbfce
- MD5 405f0e6e5a012d780559c163626899d9
- SHA1 71b63cb1d6d956fb2bec22801ce9f74edf3d5a83
- SHA512 9eff3c171c0d6366aa1383a613f6f419664ce473f7041665d2e5d2e52b0d6fa6d94c76141a9743b4bb65bdd3d7a52bb3bfe207dda3d6bae496fcc6f70066cd35
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 9f9495996a8106cdc43f84b09fd25c1fba449c68ff7d58841d2424e102045299
- MD5 e56bb959c6fcf29dff7ad8b743ef1e82
- SHA1 4fab16f21d424581814864354eefca22ef0ca5f4
- SHA512 1d2a2ef649afc0a225e8edfc0c58815f3a869ea8a33e327cf0095357418d839d25d6d949a3932a66794fe4c910e9e4daa3e3840947865cfb292566b9e669dfec
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/4100f42d56e98391_0
- Size 326B
- SHA256 ec2d5336077c0309ffd1e9cd06791e495acdca4b308718c6859b8153eb132224
- MD5 0d80a95de11c4f0babae40aec69008dd
- SHA1 2e644c0a129f981b6e5f76d2d45ae89bdb2a583e
- SHA512 52c5170555ccd6f247c6743e075602c4fa6cf774d8f6ec4f4925a1ccb06b29d9295e3a7de3b0a8998c8a381349dfe4383c9e644a58642ae07c8259a185eedb04
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 d61194eaa37d578eece99110c4adc4df0b7abd82917449b0aeac17a024e8b6e8
- MD5 5ea9598e1a21499529073c1756a8ea0c
- SHA1 2fc9cda37a613ca09b306423d7068179d7888bd2
- SHA512 f4d5858dc5a9cfb35996743659863aede778af1caba57d8db2c693cacc068de7243dede9f6085cb3aba1eef38f417e25de9d7232e6d3044391240432deca6538
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
- Size 96B
- SHA256 f306b2bf01a5abd971858bcd977859e508cda2149ee5025bfef9c3c9a133e108
- MD5 6f3c99f8c5a8cc129a0abd69b384d5cd
- SHA1 6748e3f7e1bd80472085faa09c9de94fe902d27b
- SHA512 8423271d2571d18478bc53ff3165e1da0988496f07de49abb9973c1e4ccf8054410d60b80cb659480557dd4e81c406ee1bb79a1759f90a5a098e84b73edb979c
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index
- Size 144B
- SHA256 d490ced812cd2189f86cd9445ff93081dcb6a58b4a54f789c7cde49244e2662c
- MD5 d1ae44488db3153857d27fa0c8e0f414
- SHA1 899b80a7a1fe9ecd98cb1cb60da77ef23d99492c
- SHA512 c3fb1dd446c8e8af0cf34d7343b4654c7c77110adbb1dc8d0160c74a2f1f0f1c913d19fed336743c63e76ca3c1fbec52d4082e11834c985b6d3dfe3f1804859b
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index
- Size 96B
- SHA256 15a07eee59c7efae125390fa73dc9ad045c32bdfbd1fd74d2591170435896a38
- MD5 e77503c212a15504bb346fd6e44609bb
- SHA1 f31cb0bf423c0df6d36cbb3c76d7719043602983
- SHA512 48ee625c3e494ba95f119757ea593d660a22e156c13e4741631ba7f1f3310ac7490f0e162520fd54fa1e246863a8d9fad8884e0936a80d83fa01e4c948ab21cb
- MD5 SHA1 SHA512
- Path /data/user/0/com.zrwilvjx.myikbhif/cache/WebView/font_unique_name_table.pb
- Size 57KB
- SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
- MD5 f080fa2a56ab5479d58063e5ea871447
- SHA1 4b3fd57a98916fa5784305b76ba30af26b5253d9
- SHA512 8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
- SSDEEP 1536:sdwd+YP1Q30EtKzcpHDv16mlFwxtLcPBcDAvd5GxdXBZoTG5hGrLTIoZwqMY3zSR:n+YP1Q3NtKzcpHDv16mlFwxtLcPGDAv+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.zrwilvjx.myikbhif/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
- MD5 97ccd9a2b2063143df56b6937f961ca4
- SHA1 5e78a91ae5df289ce83443cb7d5589dd3504fb5d
- SHA512 86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
- MD5 SHA1 SHA512