Analysis
-
max time kernel
2951055s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
25-11-2022 11:18
Static task
static1
Behavioral task
behavioral1
Sample
6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9.apk
-
Size
550KB
-
MD5
eb8e682500e9b467c77110db2f89d6e3
-
SHA1
8b74b77b06bf457951183c27f772d23f0d8e2d5b
-
SHA256
6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9
-
SHA512
c3256d7d4a4be2e9ccbaeeb00e70c024e6cbc5111ca2c2e64c6ad5aec49167d9447ba9c56dc44132b0c2e9564f8745db6dbb7946e432c6f2537bdc9e418097d2
-
SSDEEP
12288:S1tjfU6OCU6pU62U6/7k1GHqDm2yc51kez9NgUh4anKj/ESM2R:STjfOCp241GHqDhbzjgUh4b7R
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.zw.subwaysurfdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.zw.subwaysurf
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.zw.subwaysurf/app_webview/.com.google.Chrome.qt9OFaMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.zw.subwaysurf/app_webview/GPUCache/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.zw.subwaysurf/app_webview/GPUCache/index-dir/temp-indexFilesize
96B
MD58dc51397bb1f61de97d5f26a934dfd19
SHA11486ccc04017f97057de27c951587bacc621436f
SHA256e416609d46a8dad2a064cad4acae26d14863531b59d970b96481e30df7829b56
SHA512c4779166e28adcac7d46b1519d0806d7c5c027831843e0f8ee726bf8b5918f4b2f046b94d47bf0f3defc1a4d267e39e1351be5267bac6ae6c1b78d1273318491
-
/data/user/0/com.zw.subwaysurf/app_webview/Web DataFilesize
112KB
MD5b663831f8cc130493476d94f2d7a5330
SHA1043a1956ab8e40821d67043f8a9110a8eb36fb93
SHA256c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
SHA512e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
-
/data/user/0/com.zw.subwaysurf/app_webview/Web Data-journalFilesize
1KB
MD52994e68ebd7188046f8f4797b4f23c8b
SHA1f006072667ac5efc3804fba1b10163275f7034e9
SHA25626405d05e7ff91999cf7a74edeff948cb14c4b18305724de43843e22b9516a14
SHA5128b1a3dc605530029aecc6c5cbc555ced383d0ce69ac5c653bd77cc6db4ba9bd4dc354e9aeaf5e60dda64ce88f449a6e7f600f4ce9fb0d451b2282b3023e406b9
-
/data/user/0/com.zw.subwaysurf/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.zw.subwaysurf/app_webview/metrics_guidFilesize
36B
MD5ce4de7590e095b16c81b6083190a38d6
SHA1f29da0978bd8a8b700b2a21349136cb8b17ea172
SHA256a8b64ab52fedd4d5039acdc48b1e3cd000fb9ecf76307541220ba4154ad69285
SHA51243be44d3ae1c7ad3b5bb9048b9ab10509e94a9cab903828ec279b8d57ab0d5bf00b6527a0860fa4a6ff24031c0e75f115bb6ac9657ad5eba9e5c873b9f4d0609
-
/data/user/0/com.zw.subwaysurf/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.zw.subwaysurf/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.zw.subwaysurf/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.zw.subwaysurf/cache/WebView/Crashpad/settings.datFilesize
40B
MD5f949da387091b9d06c2333fa9b7e07f7
SHA18e9532e37bd16a4bb59113f6cb468815e06656e5
SHA256fcb7a056b85e1632373791f4f631b85fd992b0e5b10826576ab00060c3b98174
SHA512ff460b602f035c1cbf8cfb3b7dedcf456f2be726a57a343248fc9e51a875d46a354ffe61018e1eec069ff148209639642941414f056e43a3d22403dfc9cde5cb
-
/data/user/0/com.zw.subwaysurf/cache/org.chromium.android_webview/Code Cache/js/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.zw.subwaysurf/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexFilesize
96B
MD5a310072a8f98f2ed96f6f07f7f5f4d28
SHA1b144c199ea4592f610dcd2a9b6e3b6956ed2f71d
SHA25684e81326e47dab8454e8fed10eed796783e71e1d5273cc366056f3e179258b62
SHA5124c0ddafe7c4055aff1f6145bb8c4423fe9bef6c160fbbd4ba1f35e6b66bce5e13cd87c83f358e2b507ce48adab89be4bc9ba895802ab297ff54d391efaf42849
-
/data/user/0/com.zw.subwaysurf/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD56ef709b8536878951e87c29a1518fc2b
SHA124376c70b00152501b3d98df61fa7db435339172
SHA25610b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
SHA51296547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9