Analysis

  • max time kernel
    187430s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    13-12-2022 11:07

General

  • Target

    Fast Text Scanner_1.0.0.apk

  • Size

    5.0MB

  • MD5

    335619ce5733155e5c978375de9b670b

  • SHA1

    e94a3a3792488e50afd774279e1b7b69a024fba6

  • SHA256

    e6efc3c44781a1f2c9e64ddf89cf63504651fa0fba7b386113d0d2651419654b

  • SHA512

    aad756892e12decdb18c3070c878b09307cee0b1a4baa3e72ae91c1a339cb07589ce501ab34a5165a6fc901b50f3ed3e427f8dd609d8655e7f90b8bea4fe9871

  • SSDEEP

    98304:mE3oFCGGsZW9l/Mqe2IeZ2Y6DLQoVg+5HxIAOoEYslGfrI3ZmZmq7:Lc1GsZonhZ2YmQAg+s3oEYzfkpmJ

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.ocrscantool.textscanner
    1⤵
    • Loads dropped Dex/Jar
    PID:4660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ocrscantool.textscanner/[email protected]

    Filesize

    13KB

    MD5

    d83590b7cb879e8f9d5bed96c3a762fa

    SHA1

    dfe496d357f07b9cc6f0857f82f64fcb6d2abfc1

    SHA256

    5a78a6bc4ea69b14797a71ec6c7a73908c8ef26e94bdd336231a419e244a30f4

    SHA512

    2b8f52ac951064ceb4f2fd004a02de8a98e07f1ec870f56ee082019e2d3e3c165e18c13d18bda7b801a9065af4f52363fd8ef02df58581e847c46c1d764396b5

  • /data/user/0/com.ocrscantool.textscanner/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    581718896a2b109ece4c1d98c891e2b4

    SHA1

    d6343fe37f7235de33e72cdd050a4b1106036676

    SHA256

    c462b0357cdbf43a51abe5ec8c910e9f147e926df70578b9de6c93a144cdc279

    SHA512

    1306aac342aca1273fe3b5f2f3d8f95600a2233927a33d5063fca8f17b7952a3206eac805ce9ac438b75675d2a9c36517def8212031d976a134f3559d3145b3e

  • /data/user/0/com.ocrscantool.textscanner/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    057353a2e8b9fdcee08bd570e2358c00

    SHA1

    43cfc59d26d7a34402d47a3f086bf386b5f6ae4a

    SHA256

    a2647791fc0eee9ae1a10e9fc84bca6a7590c984dc92f48c1af258926b84caaa

    SHA512

    163b373ee23398650d3498eee2fdece0084f3e614fbd38896647a4873101096bb6e1b4c0e04aa835f37d1c99fa50211d3533570559e4fac6507362d7df233040

  • /data/user/0/com.ocrscantool.textscanner/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    8dfcfdcef5a9793fb83bda404ec3f42b

    SHA1

    dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

    SHA256

    a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

    SHA512

    e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

  • /data/user/0/com.ocrscantool.textscanner/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    ad797b8ac1fd3dc887d2a37221edef8b

    SHA1

    6284fb290ae462f5cd7a6cd4ceaa36af0bc7cd89

    SHA256

    d43fbcb14e046b19cee08384d5ece9bc0895fefe9bb275a99bee026d4c2df4fc

    SHA512

    ee7639b83b02c726271da52ebf1d7d983545f04cb6f1baef595fd2c4ae18aa7cf658ce75036c31f986c8dce4040e6722fd34eb4826e53cdc13f93735f2e52219

  • /data/user/0/com.ocrscantool.textscanner/files/.com.google.firebase.crashlytics.files.v2:com.ocrscantool.textscanner/open-sessions/63985D1F02D40001123476F100831356/report

    Filesize

    750B

    MD5

    bbce856a3f85393baed2b351296eddc2

    SHA1

    9acd6697f9e4c23ca1d3c4880115b212aba2bba7

    SHA256

    ee4437bb52c48b5ae2f152ec6f76edfacc5dd393dedab45f2849e74e0ecc148c

    SHA512

    5671de8fa04c96a3b04fb477424d99018208d86e1fee88923e428c2e7fdf98d0a2daf49fda1a7f08cc3e16b0314a2f410ceacac558c79cd1288578c27980e7f3

  • /data/user/0/com.ocrscantool.textscanner/oat/x86_64/[email protected]

    Filesize

    476B

    MD5

    4e9ddc2620f0ff78c8d5600df5bcee3c

    SHA1

    fc95b6e4623ffcb56fc35b95d0e996d3b3d89722

    SHA256

    96ebabe824e569bc7eab658467961accbd76401a9275d1b8a72fa639b1dc59db

    SHA512

    9ee7111f11296325ce48618aa9355eccdaf0e840cec08969bb275cd8ecd300efc1ab1d20c7b8fec9a1268bc968ba609a8aa0acd71c22ed7e2ecd49f9c3d88c20

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4OTkxODM1MDkxODI6YW5kcm9pZDo4MjdmNmYyN2YwYWFlNDc4ZjdhOGVm.xml

    Filesize

    124B

    MD5

    8bd6a31ac71280a001456224f99c97a3

    SHA1

    ecd67d404b30b1998e848fba4ee72500448bd8c7

    SHA256

    848be89b777bb0b384d3475a22c7310644408f5969e37e15592262e2f3dc76a7

    SHA512

    3b3134fd3364e10d0b5e0508c6339f420f818c00e05e4a923949fe2ec73c4c3a27b2c416f53749ef46dd5808285b93a28b60bbf0a77787fdcea63bf957e595c2

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4OTkxODM1MDkxODI6YW5kcm9pZDo4MjdmNmYyN2YwYWFlNDc4ZjdhOGVm.xml

    Filesize

    533B

    MD5

    b9c8a80023485f52d549fe69d4ba8d4e

    SHA1

    ffe18f829208612fb600153154735554fddffb73

    SHA256

    a6c8c37fa87c09540c36aaba48765471b187ca4f0ef1ad94bc5e431ac65f7fe1

    SHA512

    6c4ea0af9b093789250fc1b35ba82a26ad845891bfe00ca403b00b1dd2f743746bcd37414f41bef0156e74c0d1fd041003096588d058dac3e69a002059b97cc7

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    ab9ef7f6e687a57609faff3664e691ba

    SHA1

    6280f376d90fde5b849186b4526a6f669bcd3539

    SHA256

    f3fbc36babc1e83e5df7f86fb5f4219aeaaa4ce69183393e76b90351b24a1d2e

    SHA512

    fdbaf145fbd7e5bf89994c54b704482ef8ea8680703938126feca7353f8f8dd7086218c49460d197909b0c7be64a26ef3913cdd9e6b75f375e42e47eae5c1292

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    657B

    MD5

    11498824e6a86953f060dd684b6fc9b7

    SHA1

    93c01dc6f7ab4e837e8bce6241d7b4187b2ef3d0

    SHA256

    b888b27e6aa69cbe7ab2eec70af9dacb43d99024a01257cdbd65d01b82a6059d

    SHA512

    a1fabb2ed9e56e71915ad1101a1e4114c81c336575a9bcad760ffeba888d5be50d00783c392d4871daf3fa64d87256e690c5d0c6b6a92d5837fa01dec0c30942

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    715B

    MD5

    1945c5b208a215fff7bc97a1e8b9a970

    SHA1

    fac75a3ff3326b7eec057ac0081daed60b0d0080

    SHA256

    deb3fd9cb8f7ef7a2474c7368c3c75feb97e5dfe6474ed6742c60cc5d347df09

    SHA512

    0b66c10ff6c0286ceb195aa3556a6454275be1f66b8dc24baa2888227095b339d7711569eee23ec05484d117d0285bdfb8347911c1ce57ca16b17551346a66ed

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    769B

    MD5

    c16afe4008ddbf5d78b4a06856dd6664

    SHA1

    6f463de754cd89469a97a8c058cf7c0cb5e25736

    SHA256

    f4d26a99491f856d5903f942093797112820fa890500cd5964b09bb84cb9feb2

    SHA512

    df7d9a93332a845ccd4c6eb9a5b1d433c980f24870b59c3acb0e586f79f90bce3e617c6202653fe5ca453ff3055338db1e8f3dd9a6d01f86f5e8efd76d14e17d

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    846B

    MD5

    6b068dc1fb8d360606b662b8d7f97124

    SHA1

    7ce3354e32d4b4b13fa789c030084534f2f83968

    SHA256

    0b83fc4a6140e85bce27643508ba62fc38f60877bcc3bf9932a55c399f39a56e

    SHA512

    16caf41dc8966c0c354d6ede514fb3cf73936b19d0a8b40eb463790b39793f90660959c0eea8f898e3161016c81217618502585f6cbee87d7a899acb68e36222

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/com.ocrscantool.textscanner/shared_prefs/com.google.firebase.crashlytics.xml

    Filesize

    235B

    MD5

    5c9fb82b3c8a7bd4c34c3c8ac68521fa

    SHA1

    b22fb4d06ebbe2bac66018ce3e8d1860d7c7a5bf

    SHA256

    484f18c02e8cdf78c6b5b833f1b03975cb8923b9283d0fe35af225bb12814333

    SHA512

    85a75c6f3bb1dbbbef009923e09ca3fcda6f10edb56b7b39550c5de20dafedec1110e363d19ed526b11f4efa1cc1f44f32f3210d4d0bc133bbfc66a7ec74b8b4