Resubmissions

25-11-2022 14:38

221125-rz2jhaec29 10

22-09-2022 17:03

220922-vk1v7scaa5 10

31-08-2022 15:17

220831-sn1y9sgacq 8

Analysis

  • max time kernel
    2939951s
  • max time network
    126s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    25-11-2022 14:38

General

  • Target

    documento_2a3d3dd.pdf.apk

  • Size

    4.0MB

  • MD5

    8f78df9b128eb2b0fb576269bba6a9fb

  • SHA1

    2128c991887a80152ca36689be503eaa6afc1b1f

  • SHA256

    33adbff1a79da4a3fde49cececac5a6b99bf217be0c6db6cdf85a46bf2087e57

  • SHA512

    4bce2fb6b264159c0b0dad184f834ecbb8eb5f908665e9eb2d783604374fb3fe03e9cdf5a4e167e308767d6c63d7f0302e9658ccb967f22affbd4bf2cf1a49cb

  • SSDEEP

    98304:rIQAS1Qd2ofrWB/urhQuzI6TZS+DixH8bU4bFLzbcHez0:8QAejky4To+mgU4bFLg

Malware Config

Extracted

Family

zanubis

C2

7

Signatures

Processes

  • com.personal.pdf
    1⤵
      PID:4734
    • com.personal.pdf:remote
      1⤵
        PID:5180
      • com.personal.pdf:remote
        1⤵
          PID:5997
        • com.personal.pdf:remote
          1⤵
            PID:6396

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/com.personal.pdf/app_webview/.com.google.Chrome.JlqjyF

            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.personal.pdf/app_webview/Cookies

            Filesize

            64KB

            MD5

            9b23e6a88d5a95f155f205cb04b93cd0

            SHA1

            b62dccbbef087a0731f226b96d15d35d8aa5e5fc

            SHA256

            f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

            SHA512

            bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

          • /data/user/0/com.personal.pdf/app_webview/Cookies-journal

            Filesize

            1KB

            MD5

            260d5d9795051b94d7c7cecfe56e37e5

            SHA1

            1e532e64e1424f86d0be6fbaf570c8e053c73b17

            SHA256

            af17368040ef76d4c6989658fbd56a71b5f4511133a2ab90ea4d93f5c6c1aa1b

            SHA512

            7ee8abbd79fdd20b7fd69b61486b526f262344d13e3d214afc4783c29afc3e8633e6f8f3d0a54f9448cba22c44725098dedb934d8bd4bc81c0b70855080e22e1

          • /data/user/0/com.personal.pdf/app_webview/GPUCache/index

            Filesize

            48B

            MD5

            6d7d499960179766cd4261d12dacc411

            SHA1

            e6f8553b0015e12b23cc551afe98763f3b1c9bed

            SHA256

            c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

            SHA512

            6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

          • /data/user/0/com.personal.pdf/app_webview/GPUCache/index-dir/temp-index

            Filesize

            96B

            MD5

            3e63e3361a7e278d3cf98c4336d2f6a2

            SHA1

            df281de4b4646cee30377f4f80b9561df66d2d5c

            SHA256

            c95209a97a88699371947be6b2d1db6e67d3f1b54a662c4196f9f551151206af

            SHA512

            8729f825ef393f7a2c41c131d49f2dddaee5a789f7ace8506c69ab0b5792c167c5a6d28f01ef27aef747c50ed8c1a54f085df1cbe4ce98c427bd6243168bf3e9

          • /data/user/0/com.personal.pdf/app_webview/Web Data

            Filesize

            112KB

            MD5

            b663831f8cc130493476d94f2d7a5330

            SHA1

            043a1956ab8e40821d67043f8a9110a8eb36fb93

            SHA256

            c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

            SHA512

            e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

          • /data/user/0/com.personal.pdf/app_webview/Web Data-journal

            Filesize

            1KB

            MD5

            6e736bfa4fd0d7d522e379284b29aef4

            SHA1

            b5dfe9d6a10857024f2bb284f176e4d21d65183d

            SHA256

            dcc70de53ffe7eafee4c8532e1f4a505342b2773ff3f452228e5eeb067c8fd5f

            SHA512

            6f86ef7c21434a86262ad5037884bf4c10431865e119866eed460c1cefa04373a19f7f8371f94cf36679defb3479b4c1165218d19c7d20186130d95340f39695

          • /data/user/0/com.personal.pdf/app_webview/metrics_guid

            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.personal.pdf/app_webview/metrics_guid

            Filesize

            36B

            MD5

            00b35e3f5dcffd270e41ceaa56f676e4

            SHA1

            85f3de742d390fb23c01aee9512a70ca101caf59

            SHA256

            f7fac9cc50b9e7ba9556dba9c9a5efb99e2a9931a914067e8f8db3c18d449e1b

            SHA512

            5ee85b9856db1101b0db3ee56fd7f88839364101f2e2acbdd1dd48ebbef2f6cf0a755cb2599a09491d6e2c5a53266d04f36db0ae607c9bf17cf4d7b00cb2c252

          • /data/user/0/com.personal.pdf/app_webview/variations_seed_new

            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.personal.pdf/app_webview/variations_stamp

            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.personal.pdf/app_webview/webview_data.lock

            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.personal.pdf/cache/WebView/Crashpad/settings.dat

            Filesize

            40B

            MD5

            c36c786d36e8bbc3ffd87a93fd28d89e

            SHA1

            38de1f2e5494ebfee6bf21ec4280032420efcb5e

            SHA256

            747cc8bca74fede10ced46c7b04ecfcdcb6ef616aecb9880b31e774db5ae02b9

            SHA512

            3746bdb795cf36bc64ddc74ddb19def375aa1762147a5adf06c82837a9e6e06e3af4c41331b82cff46ea8b672f066067f5fc732ccf65c99d807214d156fedee2

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/5b44edcbc5d5e766_0

            Filesize

            322B

            MD5

            71fe1c5ccf1005be2d76f5404ba17a3f

            SHA1

            49a7334fb52c5ad7fd33adcb83f0c7f7d9aae3bc

            SHA256

            dd2c30493bd301d8559fe11b93a48931c13497215bc895e972e00f3b7bbab658

            SHA512

            79e2776d14ed7ef0b7cf38423abcd5f73c522b9364e2b05cf35fe68722d803e74a651f91363dc2fde8df0c20dadfce16b396479884d906eb206556d96f4a5031

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index

            Filesize

            48B

            MD5

            6d7d499960179766cd4261d12dacc411

            SHA1

            e6f8553b0015e12b23cc551afe98763f3b1c9bed

            SHA256

            c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

            SHA512

            6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

            Filesize

            96B

            MD5

            7445b7596eb083bfcc3996bb663c95f6

            SHA1

            e580257ae7ab1366d6af98309906a3643d13e9e9

            SHA256

            d65414cac4d577de1b1d5f8d3798be5b6f3383cdf559734eb7dfab83afe9d84a

            SHA512

            b085ec01eee593f956d54e5e2d257036906ce6b8f1647310c024d0828c0db198d47300fd54f27abe0a094194e7ecccbe553e3069da156f604c1459a26a958303

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index

            Filesize

            48B

            MD5

            6d7d499960179766cd4261d12dacc411

            SHA1

            e6f8553b0015e12b23cc551afe98763f3b1c9bed

            SHA256

            c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

            SHA512

            6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index

            Filesize

            96B

            MD5

            2df2fa7807ce0648bdfcb00e317d1b01

            SHA1

            be6b4ae158e74736f34b3106efc6652175732164

            SHA256

            a70c836b75fdad36ca1120e8d01c795a7f86a080a57f0b5bdf331fd193cedbf2

            SHA512

            ab8db42cd2a2003659b0e11d678e75fdce58f6490af175313dad5e1372e38c811452e166912169250e73928fba67197334784ad2cf0efd9bf1eafaeeffba8b0c

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index

            Filesize

            144B

            MD5

            f7f963b4008ae5775f185edd0e7100ff

            SHA1

            50cdff8ceb5308cf8f1d5cd10feb6f797553d2dc

            SHA256

            283a6d9ffed07610a85cddc44f8afefc01349194fe3db8144f371d49526773b0

            SHA512

            7effab4806e456c3fac6de0f967f85d71facb1180c8eb8d3c589ea018aadf57aeca360d2748d12a69db29216d3c5a9e6eb01656c20fd1de0b2a2d25b463a5f6d

          • /data/user/0/com.personal.pdf/cache/org.chromium.android_webview/index-dir/temp-index

            Filesize

            96B

            MD5

            9cc5a695cd7c3be4071ecd3a57bf005d

            SHA1

            ffe6c609f8565c8ead8e0c898af8ca53edc98f1b

            SHA256

            88798f51fcfb21cdcdca3ab39fd85972148607fb52c35bbdc5ca58dea5f36547

            SHA512

            ce0fdb10f1742196db70718627ad6289be9fa7acfccf96dbaa3b61e8787a628496a4c786e6659af87bc301b59b0c76f3165427ead15b38ed423f2221d5e89b5a

          • /data/user/0/com.personal.pdf/shared_prefs/WebViewChromiumPrefs.xml

            Filesize

            127B

            MD5

            6ef709b8536878951e87c29a1518fc2b

            SHA1

            24376c70b00152501b3d98df61fa7db435339172

            SHA256

            10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

            SHA512

            96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9