Analysis
-
max time kernel
187430s -
max time network
164s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
13-12-2022 11:07
Static task
static1
Behavioral task
behavioral1
Sample
Fast Text Scanner_1.0.0.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral2
Sample
Fast Text Scanner_1.0.0.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral3
Sample
Fast Text Scanner_1.0.0.apk
Resource
android-x86-arm-20220823-en
General
-
Target
Fast Text Scanner_1.0.0.apk
-
Size
5.0MB
-
MD5
335619ce5733155e5c978375de9b670b
-
SHA1
e94a3a3792488e50afd774279e1b7b69a024fba6
-
SHA256
e6efc3c44781a1f2c9e64ddf89cf63504651fa0fba7b386113d0d2651419654b
-
SHA512
aad756892e12decdb18c3070c878b09307cee0b1a4baa3e72ae91c1a339cb07589ce501ab34a5165a6fc901b50f3ed3e427f8dd609d8655e7f90b8bea4fe9871
-
SSDEEP
98304:mE3oFCGGsZW9l/Mqe2IeZ2Y6DLQoVg+5HxIAOoEYslGfrI3ZmZmq7:Lc1GsZonhZ2YmQAg+s3oEYzfkpmJ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.ocrscantool.textscanner/[email protected] 4660 com.ocrscantool.textscanner
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.ocrscantool.textscanner/[email protected]
Filesize13KB
MD5d83590b7cb879e8f9d5bed96c3a762fa
SHA1dfe496d357f07b9cc6f0857f82f64fcb6d2abfc1
SHA2565a78a6bc4ea69b14797a71ec6c7a73908c8ef26e94bdd336231a419e244a30f4
SHA5122b8f52ac951064ceb4f2fd004a02de8a98e07f1ec870f56ee082019e2d3e3c165e18c13d18bda7b801a9065af4f52363fd8ef02df58581e847c46c1d764396b5
-
Filesize
144KB
MD5581718896a2b109ece4c1d98c891e2b4
SHA1d6343fe37f7235de33e72cdd050a4b1106036676
SHA256c462b0357cdbf43a51abe5ec8c910e9f147e926df70578b9de6c93a144cdc279
SHA5121306aac342aca1273fe3b5f2f3d8f95600a2233927a33d5063fca8f17b7952a3206eac805ce9ac438b75675d2a9c36517def8212031d976a134f3559d3145b3e
-
Filesize
1KB
MD5057353a2e8b9fdcee08bd570e2358c00
SHA143cfc59d26d7a34402d47a3f086bf386b5f6ae4a
SHA256a2647791fc0eee9ae1a10e9fc84bca6a7590c984dc92f48c1af258926b84caaa
SHA512163b373ee23398650d3498eee2fdece0084f3e614fbd38896647a4873101096bb6e1b4c0e04aa835f37d1c99fa50211d3533570559e4fac6507362d7df233040
-
Filesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
Filesize
1KB
MD5ad797b8ac1fd3dc887d2a37221edef8b
SHA16284fb290ae462f5cd7a6cd4ceaa36af0bc7cd89
SHA256d43fbcb14e046b19cee08384d5ece9bc0895fefe9bb275a99bee026d4c2df4fc
SHA512ee7639b83b02c726271da52ebf1d7d983545f04cb6f1baef595fd2c4ae18aa7cf658ce75036c31f986c8dce4040e6722fd34eb4826e53cdc13f93735f2e52219
-
/data/user/0/com.ocrscantool.textscanner/files/.com.google.firebase.crashlytics.files.v2:com.ocrscantool.textscanner/open-sessions/63985D1F02D40001123476F100831356/report
Filesize750B
MD5bbce856a3f85393baed2b351296eddc2
SHA19acd6697f9e4c23ca1d3c4880115b212aba2bba7
SHA256ee4437bb52c48b5ae2f152ec6f76edfacc5dd393dedab45f2849e74e0ecc148c
SHA5125671de8fa04c96a3b04fb477424d99018208d86e1fee88923e428c2e7fdf98d0a2daf49fda1a7f08cc3e16b0314a2f410ceacac558c79cd1288578c27980e7f3
-
/data/user/0/com.ocrscantool.textscanner/oat/x86_64/[email protected]
Filesize476B
MD54e9ddc2620f0ff78c8d5600df5bcee3c
SHA1fc95b6e4623ffcb56fc35b95d0e996d3b3d89722
SHA25696ebabe824e569bc7eab658467961accbd76401a9275d1b8a72fa639b1dc59db
SHA5129ee7111f11296325ce48618aa9355eccdaf0e840cec08969bb275cd8ecd300efc1ab1d20c7b8fec9a1268bc968ba609a8aa0acd71c22ed7e2ecd49f9c3d88c20
-
/data/user/0/com.ocrscantool.textscanner/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4OTkxODM1MDkxODI6YW5kcm9pZDo4MjdmNmYyN2YwYWFlNDc4ZjdhOGVm.xml
Filesize124B
MD58bd6a31ac71280a001456224f99c97a3
SHA1ecd67d404b30b1998e848fba4ee72500448bd8c7
SHA256848be89b777bb0b384d3475a22c7310644408f5969e37e15592262e2f3dc76a7
SHA5123b3134fd3364e10d0b5e0508c6339f420f818c00e05e4a923949fe2ec73c4c3a27b2c416f53749ef46dd5808285b93a28b60bbf0a77787fdcea63bf957e595c2
-
/data/user/0/com.ocrscantool.textscanner/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4OTkxODM1MDkxODI6YW5kcm9pZDo4MjdmNmYyN2YwYWFlNDc4ZjdhOGVm.xml
Filesize533B
MD5b9c8a80023485f52d549fe69d4ba8d4e
SHA1ffe18f829208612fb600153154735554fddffb73
SHA256a6c8c37fa87c09540c36aaba48765471b187ca4f0ef1ad94bc5e431ac65f7fe1
SHA5126c4ea0af9b093789250fc1b35ba82a26ad845891bfe00ca403b00b1dd2f743746bcd37414f41bef0156e74c0d1fd041003096588d058dac3e69a002059b97cc7
-
Filesize
395B
MD5ab9ef7f6e687a57609faff3664e691ba
SHA16280f376d90fde5b849186b4526a6f669bcd3539
SHA256f3fbc36babc1e83e5df7f86fb5f4219aeaaa4ce69183393e76b90351b24a1d2e
SHA512fdbaf145fbd7e5bf89994c54b704482ef8ea8680703938126feca7353f8f8dd7086218c49460d197909b0c7be64a26ef3913cdd9e6b75f375e42e47eae5c1292
-
Filesize
657B
MD511498824e6a86953f060dd684b6fc9b7
SHA193c01dc6f7ab4e837e8bce6241d7b4187b2ef3d0
SHA256b888b27e6aa69cbe7ab2eec70af9dacb43d99024a01257cdbd65d01b82a6059d
SHA512a1fabb2ed9e56e71915ad1101a1e4114c81c336575a9bcad760ffeba888d5be50d00783c392d4871daf3fa64d87256e690c5d0c6b6a92d5837fa01dec0c30942
-
Filesize
715B
MD51945c5b208a215fff7bc97a1e8b9a970
SHA1fac75a3ff3326b7eec057ac0081daed60b0d0080
SHA256deb3fd9cb8f7ef7a2474c7368c3c75feb97e5dfe6474ed6742c60cc5d347df09
SHA5120b66c10ff6c0286ceb195aa3556a6454275be1f66b8dc24baa2888227095b339d7711569eee23ec05484d117d0285bdfb8347911c1ce57ca16b17551346a66ed
-
Filesize
769B
MD5c16afe4008ddbf5d78b4a06856dd6664
SHA16f463de754cd89469a97a8c058cf7c0cb5e25736
SHA256f4d26a99491f856d5903f942093797112820fa890500cd5964b09bb84cb9feb2
SHA512df7d9a93332a845ccd4c6eb9a5b1d433c980f24870b59c3acb0e586f79f90bce3e617c6202653fe5ca453ff3055338db1e8f3dd9a6d01f86f5e8efd76d14e17d
-
Filesize
846B
MD56b068dc1fb8d360606b662b8d7f97124
SHA17ce3354e32d4b4b13fa789c030084534f2f83968
SHA2560b83fc4a6140e85bce27643508ba62fc38f60877bcc3bf9932a55c399f39a56e
SHA51216caf41dc8966c0c354d6ede514fb3cf73936b19d0a8b40eb463790b39793f90660959c0eea8f898e3161016c81217618502585f6cbee87d7a899acb68e36222
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
235B
MD55c9fb82b3c8a7bd4c34c3c8ac68521fa
SHA1b22fb4d06ebbe2bac66018ce3e8d1860d7c7a5bf
SHA256484f18c02e8cdf78c6b5b833f1b03975cb8923b9283d0fe35af225bb12814333
SHA51285a75c6f3bb1dbbbef009923e09ca3fcda6f10edb56b7b39550c5de20dafedec1110e363d19ed526b11f4efa1cc1f44f32f3210d4d0bc133bbfc66a7ec74b8b4