Analysis

  • max time kernel
    2951055s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    25-11-2022 11:18

General

  • Target

    6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9.apk

  • Size

    550KB

  • MD5

    eb8e682500e9b467c77110db2f89d6e3

  • SHA1

    8b74b77b06bf457951183c27f772d23f0d8e2d5b

  • SHA256

    6adb2a655e5d14a10e71a604d7671962bd1bf38377b107ff3c5bc1ae35c240a9

  • SHA512

    c3256d7d4a4be2e9ccbaeeb00e70c024e6cbc5111ca2c2e64c6ad5aec49167d9447ba9c56dc44132b0c2e9564f8745db6dbb7946e432c6f2537bdc9e418097d2

  • SSDEEP

    12288:S1tjfU6OCU6pU62U6/7k1GHqDm2yc51kez9NgUh4anKj/ESM2R:STjfOCp241GHqDhbzjgUh4b7R

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.zw.subwaysurf
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4750

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.zw.subwaysurf/app_webview/.com.google.Chrome.qt9OFa
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zw.subwaysurf/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.zw.subwaysurf/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    8dc51397bb1f61de97d5f26a934dfd19

    SHA1

    1486ccc04017f97057de27c951587bacc621436f

    SHA256

    e416609d46a8dad2a064cad4acae26d14863531b59d970b96481e30df7829b56

    SHA512

    c4779166e28adcac7d46b1519d0806d7c5c027831843e0f8ee726bf8b5918f4b2f046b94d47bf0f3defc1a4d267e39e1351be5267bac6ae6c1b78d1273318491

  • /data/user/0/com.zw.subwaysurf/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.zw.subwaysurf/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    2994e68ebd7188046f8f4797b4f23c8b

    SHA1

    f006072667ac5efc3804fba1b10163275f7034e9

    SHA256

    26405d05e7ff91999cf7a74edeff948cb14c4b18305724de43843e22b9516a14

    SHA512

    8b1a3dc605530029aecc6c5cbc555ced383d0ce69ac5c653bd77cc6db4ba9bd4dc354e9aeaf5e60dda64ce88f449a6e7f600f4ce9fb0d451b2282b3023e406b9

  • /data/user/0/com.zw.subwaysurf/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zw.subwaysurf/app_webview/metrics_guid
    Filesize

    36B

    MD5

    ce4de7590e095b16c81b6083190a38d6

    SHA1

    f29da0978bd8a8b700b2a21349136cb8b17ea172

    SHA256

    a8b64ab52fedd4d5039acdc48b1e3cd000fb9ecf76307541220ba4154ad69285

    SHA512

    43be44d3ae1c7ad3b5bb9048b9ab10509e94a9cab903828ec279b8d57ab0d5bf00b6527a0860fa4a6ff24031c0e75f115bb6ac9657ad5eba9e5c873b9f4d0609

  • /data/user/0/com.zw.subwaysurf/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zw.subwaysurf/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zw.subwaysurf/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zw.subwaysurf/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    f949da387091b9d06c2333fa9b7e07f7

    SHA1

    8e9532e37bd16a4bb59113f6cb468815e06656e5

    SHA256

    fcb7a056b85e1632373791f4f631b85fd992b0e5b10826576ab00060c3b98174

    SHA512

    ff460b602f035c1cbf8cfb3b7dedcf456f2be726a57a343248fc9e51a875d46a354ffe61018e1eec069ff148209639642941414f056e43a3d22403dfc9cde5cb

  • /data/user/0/com.zw.subwaysurf/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.zw.subwaysurf/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    a310072a8f98f2ed96f6f07f7f5f4d28

    SHA1

    b144c199ea4592f610dcd2a9b6e3b6956ed2f71d

    SHA256

    84e81326e47dab8454e8fed10eed796783e71e1d5273cc366056f3e179258b62

    SHA512

    4c0ddafe7c4055aff1f6145bb8c4423fe9bef6c160fbbd4ba1f35e6b66bce5e13cd87c83f358e2b507ce48adab89be4bc9ba895802ab297ff54d391efaf42849

  • /data/user/0/com.zw.subwaysurf/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9