Resubmissions

15/01/2023, 04:36

230115-e8nmsaaa9710

12/01/2023, 09:04

230112-k1lfcafe967

Analysis

  • max time kernel
    2772096s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    12/01/2023, 09:04

General

  • Target
    Quick PDF Scanner.apk
  • Size 10.6MB
  • Sample230112-k1lfcafe96
  • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pdfdocuments.quickscannerapp
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4774

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies
        • Size 88KB
        • SHA256 775620fbd1142032702fad654b7f5809ba04eb90e126511c4595a1c9bef32fb7
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 6afa0b120ef9a7e83b7014f9be59da7b2785883b760e5579740e4da68673433f
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 e79af463a8a7eabd1f7835f312eb061c52d23864efc2c17dec33d1ff64ebab0f
        • MD5 SHA1 SHA512

        000001.dbtmp

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        000003.log

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000003.log
        • Size 936B
        • SHA256 01f50c030d3508a33a0e4e824d86e1255b5b4072d3decf123fd49a5b6a71a91b
        • MD5 SHA1 SHA512

        LOG

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOG
        • Size 70B
        • SHA256 eb6390c919453f361f9c01a8b90cc5ae54e7afc3fb418d25f524f8a7ace81d6b
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 9fb073d44e8818e61c450f1bc3463160e5fa779668a210e9b921d9297d1dae39
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid
        • Size 36B
        • SHA256 654c768a12a644c594ee52462f366ddf6234200d69993a56d511518ad224d097
        • MD5 SHA1 SHA512

        1582435991586.jar

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP

        settings.dat

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 1e246a799cb7e91fe31d70bc23e0882350a2b6f3ea1a3aa3bc2924571502a2ad
        • MD5 SHA1 SHA512

        8223efb232e7bbbc_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/8223efb232e7bbbc_0
        • Size 512B
        • SHA256 09dbf5da28a0f33234fc3a151e68d3cd92f7e80d20a9b50e71939775c3bdc166
        • MD5 SHA1 SHA512

        e06cc44686ac5311_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0
        • Size 548B
        • SHA256 92e8107184f8ee5762c7cb2c82e9966722c9b429d12469a950e5add8cee9a577
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 40c1830ef407da123074d9f69302fe736ff5c624e03a6ed95b8b491d74c346a0
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 192B
        • SHA256 b796b21e9b516fcc635d8c88a7610a03084b8b974958a0bb943f909db572cc29
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 192B
        • SHA256 65f4cf3e788a9cc22e591f602f03f29e934d5138d2d22e48834383a8e5b6227a
        • MD5 SHA1 SHA512

        bc810d9ce0332bf9_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/bc810d9ce0332bf9_0
        • Size 10KB
        • SHA256 c6a7c09af3119d4bc3d2a545f7c49b1eb8c209ef54e411ee33c453cf4b00338a
        • MD5 SHA1 SHA512 SSDEEP

        dfe6b2497a7513ba_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
        • Size 12KB
        • SHA256 00b315f4553dc133b796ac2d49b08ea09c75ba10d3b6b8fbe6073ee6be1781fd
        • MD5 SHA1 SHA512 SSDEEP

        f038e94cb33282ab_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_0
        • Size 249KB
        • SHA256 ff413556b78a6a12744eb28f0575a1fb59c57261910ff164fcf93fa52ec233ad
        • MD5 SHA1 SHA512 SSDEEP

        f60eaf12735df878_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_0
        • Size 115KB
        • SHA256 25e0ffbf5b4eb96cbb5ce0f9dcc7b6cab9cfe5c3fe981e24f837727e713541a1
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 144B
        • SHA256 5f257328ff71443ddb509cc7b07261b53720850624ac5c51cf86fe4a1ee05aca
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 288B
        • SHA256 2d1500e675c806339b1179394040c00f8df596e4e4a6da921646d9635a66f222
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 288B
        • SHA256 03930576c11f14022cbb7aa26128184913242ce9975a605582e3d120b6c9785b
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 133B
        • SHA256 e19af5e811fc610627fabb46d45bbec55c6ab8a7e5d519f2f2191c3fb38a60af
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 175B
        • SHA256 2955c491b28a39405e0567dbcc0297358b0d2cfad1a0fe5570c430fc3451dec5
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 515B
        • SHA256 204e875ea416df1e96807f848d1ee840c567a7cb741e40633be055ed6aa15117
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 569B
        • SHA256 b4276a3726af85c2f710b8947049e363a52aad75cfd0127c3775f893700153a9
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 548B
        • SHA256 aa03bd7674aecb8fb50d5559d56e070d3024cae8c3aedbe8a96c61b7c5980892
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 234B
        • SHA256 603e914c2f37dc045342afc0ea702f6b4f5072e64f3d50d3c38946f932112a70
        • MD5 SHA1 SHA512

        com.pdfdocuments.quickscannerapp_preferences.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 122B
        • SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
        • MD5 SHA1 SHA512

        com.pdfdocuments.quickscannerapp_preferences.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 234B
        • SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
        • MD5 SHA1 SHA512