c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f

Analysis

max time kernel
3176045s
max time network
132s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
27-11-2022 12:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f.apk
Size

435KB
MD5

d7f69bad47759361c6b328eecf26297a
SHA1

f070cb686ac3a15b1f2b9904f5f3181aae60fc7d
SHA256

c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f
SHA512

a2f7a1f9b1595472c09e497350f83c722bb700abf52bce2e4b5295c542174ff3d5c27c078294f62dff208736122bd508da1a2e72ed5f53040de2c4e11368c1e8
SSDEEP

6144:m4wUBwU4wUBwU74jHm8PpFbiu+zb+RDsySD1+YWl27202pl+9HaT3J/iTtgjy6r6:Mne/cZ8qxuOvD1tr2+ntK8YxWvek

Score

6^/10

evasion ransomware

Malware Config

Signatures

Reads information about phone network operator.
Removes a system notification. 1 IoCs
evasion

Processes:

com.clans.war.apps

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag com.clans.war.apps
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.clans.war.apps

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.clans.war.apps

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.clans.war.apps

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.clans.war.apps

com.clans.war.apps
1⤵
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:3994

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.clans.war.apps/app_webview/GPUCache/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.clans.war.apps/app_webview/GPUCache/index-dir/temp-index
Filesize
48B

MD5
6f197c07918a96564f9b6576da5b8c8c

SHA1
6179c0c82b81e67d4918e725bc229537ce4bc229

SHA256
7b27e91edd2dc8cfcd56f2f88215d1fe6082a58575877ed5d980f1c5210b0dbf

SHA512
5b1f1acb967cd02e4d1f976725c9407401b15477210aa54e8c32979900defb5acb77a9359418fa21accd73fd0bdd18998e355e6ad5f02e16841296ff147bdda1

Download Submit
/data/user/0/com.clans.war.apps/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.clans.war.apps/app_webview/Web Data-journal
Filesize
1KB

MD5
0c94c280ae3dea1dc903d8c615ad971c

SHA1
bbf5e869d279849d13ddaf34aa3bbece22857baf

SHA256
b94d6a0a4f3832199da22a3ca9c04912b7ef17fbf4b49d4f06aca4ace4788cc3

SHA512
8ad4007555bcb88aaee8d01e328fd3c76c3c4077e766309aa4bd5ca7b39d411e6c55f06914922e963f1f3422b8ff1a31eed527ecde43496b5b641e7de9bb41f2

Download Submit
/data/user/0/com.clans.war.apps/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.clans.war.apps/app_webview/metrics_guid
Filesize
36B

MD5
ec003c933e4cb6f99c107b0a53ef6aa8

SHA1
31941b14053d3a3abea34b9ae1abe9c720c28e5b

SHA256
5c3ffcbb5725b37bd571e7a1aa6e927ed75f46cfdfc4552a4aba801f5329b32f

SHA512
af0245d84c2d0d7444a4f645196b322b75424f4462fc37a07dd9df48b773d61527a38ae0931db07b4a8da16c3e4776349c53c7fb1d39f4031d2de328f0c353c1

Download Submit
/data/user/0/com.clans.war.apps/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.clans.war.apps/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.clans.war.apps/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.clans.war.apps/cache/.com.google.Chrome.KIaM2N
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.clans.war.apps/cache/org.chromium.android_webview/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.clans.war.apps/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
f8d8bd3956f3e7bdebfd615898442971

SHA1
2426a93645d56863a50ab44e0ce64d7cd9a9a2df

SHA256
894df97bbe30a576140383e46d808c7eef79e1a3bdc9ef13d7a4c16ec811ba21

SHA512
d5ea1ac1f5c6a734abd520a54b41dd21d4c58a91554fd0163275b6f3b1552368376067fdb37e376ea4511929537ce5b3f7d1dce2222eb97bc0dbf85695bfbc15

Download Submit
/data/user/0/com.clans.war.apps/files/eula.zip
Filesize
63KB

MD5
1a6d49d2adb9303a161a950db2de3927

SHA1
3f9a3ff691d967a4bc3bdffe6327cfab0c416ef4

SHA256
2eec668519c3ac15ba5e1c7bb8d83abb9bf935a32bde220e42a7047d66c824d2

SHA512
6459e8004f34945396fcec424bc37e34c7f86483a63a74a9bca2e9c70791cb0fda0ccb23b72944167693c7c71b418db41acd08dc83f2bf55594a02c5725fa4cb

Download Submit
/data/user/0/com.clans.war.apps/files/offline_eula_body.html
Filesize
18KB

MD5
7813643485a5318f68291e87315a6fca

SHA1
207f1059f5ea34b0fc4011848fa4682608d26443

SHA256
c0487218c63d176ff68c0c6bc91866222ad9ae6420ea6fdf06790ff01a1db918

SHA512
e571984238e162b5d2c61973fa62645950f69b2a75a0c7b11d6854c9b89ab0164475c96515b7c48c8d60926c90f439e7c172d5df00b11413bd6584b0d0b3f19c

Download Submit
/data/user/0/com.clans.war.apps/files/offline_eula_footer.html
Filesize
13KB

MD5
9818dabc2eb86d5f4f071e9d67334570

SHA1
117e7978c9293d86ea5492b90a4999cc24225dbb

SHA256
1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b

SHA512
79937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0

Download Submit
/data/user/0/com.clans.war.apps/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads