Analysis

  • max time kernel
    2952212s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    25/11/2022, 11:21

General

  • Target

    f89a18e8ab6c4c0adbb354d1282617cda2875171c1f17f6d242d306fa639be2f.apk

  • Size

    552KB

  • MD5

    3da27d6ae2ea3370fb16e4955ae21802

  • SHA1

    bbb04ba985075924fb5a5f79fa5160116dea3b20

  • SHA256

    f89a18e8ab6c4c0adbb354d1282617cda2875171c1f17f6d242d306fa639be2f

  • SHA512

    e6b08f5bddb47544c2f5f671967e1a862a0425e2c6ac77ed2be907de0eb6974a138429dbb76b66015962826eef28fdf06cc7555371e1c802b2fc7f812bb91949

  • SSDEEP

    12288:YRd6hN+J+ZOFdP8tsTwVeULZBm5FClbCQv8R4Lb4:n+JlPGsccDfApv8R4/4

Score
1/10

Malware Config

Signatures

Processes

  • com.tangergraph.whitewolf
    1⤵
      PID:4652
      • /system/bin/sh
        2⤵
          PID:5019
          • stat /sbin/su
            3⤵
              PID:5078
            • stat /system/bin/su
              3⤵
                PID:5111
              • stat /system/xbin/su
                3⤵
                  PID:5132
                • stat /data/local/xbin/su
                  3⤵
                    PID:5152
                  • stat /data/local/bin/su
                    3⤵
                      PID:5172
                    • stat /system/sd/xbin/su
                      3⤵
                        PID:5192
                      • stat /system/bin/failsafe/su
                        3⤵
                          PID:5212
                        • stat /data/local/su
                          3⤵
                            PID:5232

                      Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • /data/user/0/com.tangergraph.whitewolf/app_webview/Default/GPUCache/index

                        Filesize

                        48B

                        MD5

                        6d7d499960179766cd4261d12dacc411

                        SHA1

                        e6f8553b0015e12b23cc551afe98763f3b1c9bed

                        SHA256

                        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                        SHA512

                        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                      • /data/user/0/com.tangergraph.whitewolf/app_webview/Default/GPUCache/index-dir/temp-index

                        Filesize

                        96B

                        MD5

                        5eb846a4071c7c8a42102b99ab928cf8

                        SHA1

                        8e40eaf6a44fbb4b2ec3eabb93c4f3513622bc46

                        SHA256

                        8178df7cc15c8aab1b30aa95eb44f2b7880ad5837338dd68662f209e7d724fa4

                        SHA512

                        b46ca1ff27689527590c2a228e67459be42f8920158e812342fdd40116522631f7a32b59c09474087fe9219e5e7d6dabf600b24ef0f672e1d3b09d7c5723d776

                      • /data/user/0/com.tangergraph.whitewolf/app_webview/Default/Web Data

                        Filesize

                        120KB

                        MD5

                        a48cd9324b1f8754b07f00d863b840f3

                        SHA1

                        11c6614775b35a58f440971dfc87c8aaac6d6173

                        SHA256

                        8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

                        SHA512

                        35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

                      • /data/user/0/com.tangergraph.whitewolf/app_webview/Default/Web Data-journal

                        Filesize

                        2KB

                        MD5

                        95b2f028d98dccdd2396b9cae040d360

                        SHA1

                        a50507cca8613c44106107c4c5baa6be377d827a

                        SHA256

                        2bd1fc4a8499067d9f3fc2ddc9ea2584d80a2de024e389a28be14b4270884a3b

                        SHA512

                        02665985427ef2a7a405a6162a939a16f9670b7056e691e64f4d7e2ec30857b37a0488e296a93b8532b526d5fefbe4b8dea304e280af6544b18ff8ea0955a664

                      • /data/user/0/com.tangergraph.whitewolf/app_webview/webview_data.lock

                        Filesize

                        31B

                        MD5

                        a8ec789ad5311e50434293e0b6acfb10

                        SHA1

                        90caac4ae2a6b34f51f88b212d84cfcba31573c4

                        SHA256

                        806c64c0e98ceb8820963dedab16efc4dbd0da297a6b009362d839c2e1f78da7

                        SHA512

                        78f0900e0e0aa6bab6ea5eae7def41ecd4d3498051585a05396867bfeb9308e1f868e3a741f10cb29b6767b0c737ba8cae540d762e119cb331a3a48121a886c5

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/Crashpad/settings.dat

                        Filesize

                        40B

                        MD5

                        84552c66ec29ae0de9630e23c5a32d94

                        SHA1

                        8e49e675ddc274e520ad44b25532d3f6699153c7

                        SHA256

                        cc154c6b4ebf75d0fd2f9ed9dbd647faa9b533c7d052d6a3515d76db1c5aae06

                        SHA512

                        4622e88988108fb516369739aee3edee1470798c857757e4e529ac2912c4ab3c61002d66734ee99351002378b57f984edf83caa2b7f8a402b0fc531b04df764d

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/Default/HTTP Cache/Code Cache/js/index

                        Filesize

                        48B

                        MD5

                        6d7d499960179766cd4261d12dacc411

                        SHA1

                        e6f8553b0015e12b23cc551afe98763f3b1c9bed

                        SHA256

                        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                        SHA512

                        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

                        Filesize

                        96B

                        MD5

                        50e151c8290427b567da2c660668ebbf

                        SHA1

                        ce7601f0cdcf0e940c2551bcb4af0c8baa370e2c

                        SHA256

                        f7f83c29348a7634c7710ef188ec3fa26a68b1681416ef3af3e5692cf5f3c38e

                        SHA512

                        58462d07a1a73be18575b8a15c0344d6207b8f0f734ca690d71ca7503752443edf73d1d720b4613a1fe20b27fede189f3509d0ac3a27ed834981e08a8a7f253a

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

                        Filesize

                        48B

                        MD5

                        6d7d499960179766cd4261d12dacc411

                        SHA1

                        e6f8553b0015e12b23cc551afe98763f3b1c9bed

                        SHA256

                        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

                        SHA512

                        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

                        Filesize

                        96B

                        MD5

                        ed38e4b79076f7f2d8fdaa7cec1dc6c4

                        SHA1

                        d699200ccbde9e109e97d9a41ad5b2c9716d9b40

                        SHA256

                        b71efa287925b7ad5be79f002efaffe8bc0a7037b39d02d3dc42bb09c071f137

                        SHA512

                        d9e754aa5dfc63466c8180ca4a37239c4151dbf51fc2edfbf9a287b50a3aff30adb475bc29cbc7b5dc7b65e712f270b93a5c0d63907c95175911ea4aa3cd6ba1

                      • /data/user/0/com.tangergraph.whitewolf/cache/WebView/font_unique_name_table.pb

                        Filesize

                        57KB

                        MD5

                        f080fa2a56ab5479d58063e5ea871447

                        SHA1

                        4b3fd57a98916fa5784305b76ba30af26b5253d9

                        SHA256

                        0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

                        SHA512

                        8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

                      • /data/user/0/com.tangergraph.whitewolf/databases/a

                        Filesize

                        96KB

                        MD5

                        80088986d19cf21d99c3b49faefb6973

                        SHA1

                        7ab61d2269d6cd1c202456adb9873ae3ee0eeefd

                        SHA256

                        47d091d77c06a17f0e84ad8e42db7008997b8c2e4b42c967d2e75439ed030fb7

                        SHA512

                        29a6949cfce06a82f6167d48f64921e5831dd193993658cef1ddca73f6a73eff8cfb69279726015e167766cad2b4ba98b99bb0ee12417b8fd3da070e99e95fe1

                      • /data/user/0/com.tangergraph.whitewolf/databases/a-journal

                        Filesize

                        1KB

                        MD5

                        c5bb9d86ce4de72fabe8b5e1297f7a69

                        SHA1

                        e43ddc70e69ba2f62fc80cab06e54902af15f61a

                        SHA256

                        65336fb63c5fc5ffbc77dbe5e0bd4999e256de955a3ae07457ba742f2ccb83b8

                        SHA512

                        d5120fa12b5d9ffade4eb30da0fe485c880c4aaf99964ed361624026dc298b4f8c3e971cb786b6750ae8ff32d2643d282bf15567bf03cc41693b01aedffc0af1

                      • /data/user/0/com.tangergraph.whitewolf/shared_prefs/1.xml

                        Filesize

                        187B

                        MD5

                        797921f39d282972762f3eae15cf8de7

                        SHA1

                        9c76f51863d0860df97d6ee99d0f89922dec5ade

                        SHA256

                        fd9e05648ef932109b839454ac434ed5cf093d6d25df1130cb1d88d85abdae31

                        SHA512

                        47ec0862ae7f4c76561c6288121d93bd09940b7e14a6e81848907810d5b92f943711285919d1c2b6d5ec259f42bfc9aca30eb252eac30f19cca807f232ac96c9

                      • /data/user/0/com.tangergraph.whitewolf/shared_prefs/WebViewChromiumPrefs.xml

                        Filesize

                        127B

                        MD5

                        97ccd9a2b2063143df56b6937f961ca4

                        SHA1

                        5e78a91ae5df289ce83443cb7d5589dd3504fb5d

                        SHA256

                        248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

                        SHA512

                        86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b