Overview

overview

10

Static

static

7

Paint Art_1.3.apk

android-10-x64

7

Paint Art_1.3.apk

android-11-x64

7

Paint Art_1.3.apk

android-9-x86

10

Analysis

  • max time kernel
    107785s
  • max time network
    127s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    12/12/2022, 12:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Paint Art_1.3.apk
  • Size 4.1MB
  • Sample221212-p7rcdsbd39
  • SHA256 0f41adb9d470c2450c2987c1c6b3a2ddcf8bcc47fad7a54ee4ec064afd0b8a3e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
ransomware

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.nuklis.artpainting
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4705

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Cookies
        • Size 64KB
        • SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies-journal
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 a1af694f73a0d1500d2fd54c43443818cede27effb77ed78814b0479b4e3c032
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.nuklis.artpainting/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nuklis.artpainting/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 00d3eb87f05278a338ee0f6b73b512e8641b7917c08c0109ed4032e6609943ca
        • MD5 SHA1 SHA512
        Submit Download

        000001.dbtmp
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        000003.log
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Local Storage/leveldb/000003.log
        • Size 497B
        • SHA256 bf251f3a19033b94b54270eb6a9575e3e5457d467e3503ea181d3fb200c260c2
        • MD5 SHA1 SHA512
        Submit Download

        LOG
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Local Storage/leveldb/LOG
        • Size 70B
        • SHA256 c3e3207572b92364a3480b8e25f619bd784218d1240923160f2c17ea375c7458
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.nuklis.artpainting/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 384b17bd977bb1a8d9290c17e4703b3fc631a175c1618a808dd5fba844bd6057
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/com.nuklis.artpainting/app_webview/metrics_guid
        • Size 36B
        • SHA256 9f22cccb38df0110120eb61ff20c8ae3deda84c3a2142c5431590a432559d5f5
        • MD5 SHA1 SHA512
        Submit Download

        1633031840514.jar
        • Path /data/user/0/com.nuklis.artpainting/cache/1633031840514.jar
        • Size 19KB
        • SHA256 b8d90074a4efd78bcdecc27a24d4249d53b0b76134590750733d1136d9ad964e
        • MD5 SHA1 SHA512 SSDEEP
        Download

        settings.dat
        • Path /data/user/0/com.nuklis.artpainting/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 338199eaef7154a8bbe6ceeadd48ab35d715126d27b6ccef389642f6bbb58e09
        • MD5 SHA1 SHA512
        Submit Download

        e06cc44686ac5311_0
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0
        • Size 548B
        • SHA256 8096a59e17151ca38ead58f091e06f71e01614d83ea1d615b886446b883e09cf
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 49f90bfacb89705c16ec6542add751d885402b6965b746ef206bd2689da43d91
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 144B
        • SHA256 662e9a1f0eb5bd0a5f70ad3edaa6a00b3506484f6027f651ec4d81885fce7c0d
        • MD5 SHA1 SHA512
        Submit Download

        dfe6b2497a7513ba_0
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
        • Size 12KB
        • SHA256 d03c6b5ea92ae399216913c616a32e7b7ca68fc1938abbbdc69254494cfba90d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f038e94cb33282ab_0
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/f038e94cb33282ab_0
        • Size 247KB
        • SHA256 0aa93c6210bfe960390c25c75f9ffca31806d1a2ba95bf71180e9f3671a5b620
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 144B
        • SHA256 3d2d08c4efd233d75b492e2376c9633cbdb027bc953eb000e9ded3c0ce90a20c
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nuklis.artpainting/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 192B
        • SHA256 8a1efa2f5e934ea23b4e82d019fea01b9452056cf747e7e568a8abbd2831f026
        • MD5 SHA1 SHA512
        Submit Download

        PAINT_ART.DB
        • Path /data/user/0/com.nuklis.artpainting/databases/PAINT_ART.DB
        • Size 88KB
        • SHA256 ecf3d48ded7978e8de46066dae0c07a2f04db68c6d41fd1063749eb9efa1fa24
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PAINT_ART.DB-journal
        • Path /data/user/0/com.nuklis.artpainting/databases/PAINT_ART.DB-journal
        • Size 1KB
        • SHA256 2eb73f689cb9d6455709b3e5486ce1125c3e89feaac9fb4e7ab1cd4b8988dc0b
        • MD5 SHA1 SHA512
        Submit Download

        layer_1_1670849940558.png
        • Path /data/user/0/com.nuklis.artpainting/files/temp/layer_1_1670849940558.png
        • Size 844B
        • SHA256 289e9ebd3e31faf2cf2293aa0eb5f5293fdfc04de8c9bd6bd00b7ef587e975a6
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.nuklis.artpainting/no_backup/androidx.work.workdb
        • Size 8KB
        • SHA256 63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.nuklis.artpainting/no_backup/androidx.work.workdb-journal
        • Size 1KB
        • SHA256 3ed2625d3380d41f91ec27f76e8008e2a64553d2d66f4de36f158ec10766a50f
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.nuklis.artpainting/no_backup/androidx.work.workdb-shm
        • Size 16B
        • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.nuklis.artpainting/no_backup/androidx.work.workdb-wal
        • Size 217KB
        • SHA256 2ea421579f52477c8020480350b3293565396d0b75a0d922ad55e72c57354785
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.nuklis.artpainting/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512
        Submit Download

        -1451633082
        • Path /storage/emulated/0/Android/data/com.nuklis.artpainting/files/-1451633082
        • Size 75KB
        • SHA256 eb1a183c7a377a39e41a121edbb294180f54a4a92f1b363dc38431182a2e0dfe
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download