eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5

Resubmissions

15-01-2023 04:36

230115-e8nmsaaa97 10

12-01-2023 09:04

230112-k1lfcafe96 7

Analysis

max time kernel
2772096s
max time network
145s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
12-01-2023 09:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Quick PDF Scanner.apk
Size

10.6MB
MD5

1e288142a45ebe7244ab899798cea643
SHA1

078295d1cda8319ed69f64b5443e4d89705d8523
SHA256

eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
SHA512

0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
SSDEEP

196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar	4774	com.pdfdocuments.quickscannerapp

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.pdfdocuments.quickscannerapp

com.pdfdocuments.quickscannerapp
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4774

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies

Filesize
88KB

MD5
166b71053e98ad18a7cbee11fa70d210

SHA1
e7c01e6c2de6d3d88ab0c234cdbf29323f6c2b55

SHA256
775620fbd1142032702fad654b7f5809ba04eb90e126511c4595a1c9bef32fb7

SHA512
e7b65b442c7ad4a6f5d25c9f7136e8a5a3bec59c993202c967812dbdb6682f7320214e905cded79f45f9902cd23b04524b997f476f98a44f477b1d184a6f6049

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies-journal

Filesize
1KB

MD5
c9f8c1cd01c58d9062bbfb90b4d8b7b8

SHA1
b11173a6855ff4d05fef2d9566c8504c8f610ad8

SHA256
6afa0b120ef9a7e83b7014f9be59da7b2785883b760e5579740e4da68673433f

SHA512
1bfe06c7d8a7d2dcac5ff3bb4a7214147178eebc5c690c2fdf17cb5ef6400c0706e410737ca0a2db41bca3fefe2e74c019acb347ac58eadf2600c0405acd9217

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index-dir/temp-index

Filesize
96B

MD5
137a03ea9336bb3947549eb1808995e6

SHA1
031d08fe7a23817434419abad24c89d641a6ad29

SHA256
e79af463a8a7eabd1f7835f312eb061c52d23864efc2c17dec33d1ff64ebab0f

SHA512
a0e73552a7b211e0a87a3db35f38ba9340ea7473136648b2919bbf7871906c3b6617690d1c685fc3996e21f7a7b7d47a4d8a7b0a95420cbf926e2c7b879daf79

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000003.log

Filesize
936B

MD5
d067d3917114d9d04a14da14687b37ed

SHA1
15f73e44a21cdc369cf9bba872dab333c192d4b3

SHA256
01f50c030d3508a33a0e4e824d86e1255b5b4072d3decf123fd49a5b6a71a91b

SHA512
1f788ae2fd139c292485f358a489e5dbe2cdffe2e56b0f04cd8a7891524d2bb3527cb0ff7cadaa76f930ff390ea98534760092f9db3db854998de3ce81cb6203

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOG

Filesize
70B

MD5
e089352626e97af3f3b6f27dffb53c79

SHA1
9458e77fb6e0b666dfd2ccc9104ba914d2690c44

SHA256
eb6390c919453f361f9c01a8b90cc5ae54e7afc3fb418d25f524f8a7ace81d6b

SHA512
c056d7d6cfb93b71e79369b8ef83186aba9caa4437ac295bdfbb3d3b303890b37f446ff3c23b13b20828a770d1515a75302f0cb42ec67cdab071ae716f8f41de

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data

Filesize
112KB

MD5
b663831f8cc130493476d94f2d7a5330

SHA1
043a1956ab8e40821d67043f8a9110a8eb36fb93

SHA256
c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

SHA512
e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data-journal

Filesize
1KB

MD5
a1700b133133de9a3e70ab8df6a220ba

SHA1
28a9a358aa55f8f55539f1886a80f5057a055c15

SHA256
9fb073d44e8818e61c450f1bc3463160e5fa779668a210e9b921d9297d1dae39

SHA512
93a5fd6bec6bc1ed316d6fbc5dbe03247967acbdb132bba20eb4b0ae10e4c017013206ce1c4c615a12385abb41dc252ba8b2acb99f6195561b8cde4c50aa2277

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid

Filesize
36B

MD5
e9652dab020657fb2a97798d0af7199e

SHA1
afa6ee8d5fd755ae85d00f9ab9bbb5c025cd8a98

SHA256
654c768a12a644c594ee52462f366ddf6234200d69993a56d511518ad224d097

SHA512
f327647fc85e988beca7544d1cdfb0ceb02c82aa88107cd1d5a42efc6ea3603cb06c076c709857c989a73c702aa51a8d3488e1eae61b63b336f6619b03ada371

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
87507ac873bec0d865eeba796e81dde6

SHA1
6e9c070c0cc8000f998ddbf7ab4b983d968fa043

SHA256
1e246a799cb7e91fe31d70bc23e0882350a2b6f3ea1a3aa3bc2924571502a2ad

SHA512
8543c53415bf681134df801648e1b72e3b3416e1af32a145129927bc5b156de7503b58cecd2b85992b7d3b4f2d744733faa161b2130f6f89ed9a6ddc94ead342

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/8223efb232e7bbbc_0

Filesize
512B

MD5
f57d3c7582e2ddbd6afd64154c2f37b6

SHA1
e945ed330a68ea55d66cf92560abe5b10f9d47c5

SHA256
09dbf5da28a0f33234fc3a151e68d3cd92f7e80d20a9b50e71939775c3bdc166

SHA512
e1989a0d77b939e2313041955671f9a9b6cb7cf3b334e6ed042cde54fc6678903c183e8b72859333156981a49660b71c3d830c43a65f30f4c0532b806e80abb0

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0

Filesize
548B

MD5
049a099d8697911236c1834a822bc017

SHA1
cbe268ed79ae883ded1e79c8539b1185f0948e65

SHA256
92e8107184f8ee5762c7cb2c82e9966722c9b429d12469a950e5add8cee9a577

SHA512
9bf11070a3dda967f64f67b52e8d1836824d27b5b795d65d98293773d4f655a0725ed089db86320119ce3ba761342d7e32dc9a3d37709ef3732ba7c17ec17763

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
c769161debfde289e17cb801f0d105e8

SHA1
8498811eb343e5083e4f91dfe436d79430bd9d87

SHA256
40c1830ef407da123074d9f69302fe736ff5c624e03a6ed95b8b491d74c346a0

SHA512
4f15ed7da25391fa6e8f1ed2d12edbc9c30b28277e3c60bd708c3e86a3b9aea8d68c7d0276875937b0d9742f004ae42d6523d35c1b339c961d111d8d82b596b3

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

Filesize
192B

MD5
80d35d854bdce0e8a679515f47e6f707

SHA1
c8419e06958e06516851808d38cafd685e0a0b19

SHA256
b796b21e9b516fcc635d8c88a7610a03084b8b974958a0bb943f909db572cc29

SHA512
2ddd88a573c222b1cdfb82b8e25be661ae78ff92596cda2fa086798cf6fa8defdf055f76a0817bdb96aabfd0f84ddf1b5f8ca933e18c03de7feed934204d2240

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

Filesize
192B

MD5
32305c3f78c3b014a5d80b642b494de9

SHA1
4a409bea24a0f8ec1f41fca6cc65a5d3eb0fe92f

SHA256
65f4cf3e788a9cc22e591f602f03f29e934d5138d2d22e48834383a8e5b6227a

SHA512
11afc6773f81eba968066ad3c7089cf5c799f924ce5c813df66c6121895b171f01de1d1b41145a5483d694dbabb6b1fe8be2221bdc177a2b3d28227a14af97f2

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/bc810d9ce0332bf9_0

Filesize
10KB

MD5
19d3e7325a95860523b523393ce43063

SHA1
e0dfbff24d5a27c6875fd2d486345d7afa0a2ddd

SHA256
c6a7c09af3119d4bc3d2a545f7c49b1eb8c209ef54e411ee33c453cf4b00338a

SHA512
9b11f5d9504963142a5d837b3acb8f352188ad851276728997254570242559f0977310187da234694f1b5ee3f74a1fe2e598ad4151c072b2105f518bfc47708f

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/dfe6b2497a7513ba_0

Filesize
12KB

MD5
ea5d717bb4bf41a802ac35caf56a139a

SHA1
f09582dc805b0da4da2429a7fdfd02022f913f00

SHA256
00b315f4553dc133b796ac2d49b08ea09c75ba10d3b6b8fbe6073ee6be1781fd

SHA512
002c88a1ce316aff908a95e719f77472480d31762de614412fc6530e220be888474dd237a0f7626934e0a3eaa17c387e036a054598445bd35d0b75b2336730a4

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_0

Filesize
249KB

MD5
86877a06b30f852ca6871d56de3a3c9d

SHA1
d92593b92899f2e6769e0ea778d7ddcae3218953

SHA256
ff413556b78a6a12744eb28f0575a1fb59c57261910ff164fcf93fa52ec233ad

SHA512
a8eb5ebcbc50d8e3c824454fc2352bda4ef5e0a48b4ac50d5ecdba81be5208618e4f9af8fde339457f0c00ae95cdab5ef014c2d79a5b15072568c7ab40840477

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_0

Filesize
115KB

MD5
c94bf691d09579a994b95aa0783db317

SHA1
6c027bc207cf3cc69f4f89aad06318d76533c8cb

SHA256
25e0ffbf5b4eb96cbb5ce0f9dcc7b6cab9cfe5c3fe981e24f837727e713541a1

SHA512
96291dfc57c06e6c5b0ccca0b56fce0b28e35ee00dcc2e4e7156f9811bfcc32bbe7e13d0aa9824564bfeeb32389c6a1239a919d11547ab4d5fe22a2611495021

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
144B

MD5
486ceca406bd163eddf7040e7b7f1193

SHA1
cf7e52648825321890fd4d93b8cb83fe85e0c006

SHA256
5f257328ff71443ddb509cc7b07261b53720850624ac5c51cf86fe4a1ee05aca

SHA512
950217bed5b53b689290c962d2b5cdfddd9436ca095d9dbaa0427dcfdedb13c3fd5a2edb71e26b8eb3cbc1665a3e478b4b305646327c9e56c4a0fc6f8e5a2ef3

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
288B

MD5
92858c2e243d7960d7b7feeee150523b

SHA1
10764ae60b22375495b9e182a8249afbbd2a02d5

SHA256
2d1500e675c806339b1179394040c00f8df596e4e4a6da921646d9635a66f222

SHA512
417ed0a6b8971b20d15630240d9ae696a741fc16e015ead580c32a3696fa3d261d99909e417d5f12ebcc88d7caa30af961ddf1ee571dc6c082aa4a4c40b51bcf

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
288B

MD5
9b1f8b8c13434c173aae99bdfbd5ff46

SHA1
a940e122dd4c52e548c8ad81a76be73c67045b02

SHA256
03930576c11f14022cbb7aa26128184913242ce9975a605582e3d120b6c9785b

SHA512
ba71faae76fdc970d913b36bab53593804f7e3888a757354783c729b055b357a1ac7a5547bba6b8a8d98cfb4284b00ef19932226fc8bdf365447e3f8cfc6eff6

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
6ef709b8536878951e87c29a1518fc2b

SHA1
24376c70b00152501b3d98df61fa7db435339172

SHA256
10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

SHA512
96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

Filesize
133B

MD5
7193d2cfd62a4650218f625e4f98985f

SHA1
55212c410521952ee0ffe0214e85671c10371d48

SHA256
e19af5e811fc610627fabb46d45bbec55c6ab8a7e5d519f2f2191c3fb38a60af

SHA512
0331e7efd6a482b6fec11aefd0e7fe3d2e3ba399bf10142f45fbb60cad8f649e660e12e44eecb882a38974c47782165610cbed3a82b74e40dffaed989163fb39

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml

Filesize
175B

MD5
5992af1f3dd4eb87af20b4c55b26e5de

SHA1
cc20d7438149e3b43b0bab76d3157583ec5bd4e6

SHA256
2955c491b28a39405e0567dbcc0297358b0d2cfad1a0fe5570c430fc3451dec5

SHA512
5033c9ccbbffb6e5d671bc8129b187f822280830fe819ed781221384c29cbe1971c4411e953ccf370c58fe9793fd2a44e1e35a1e3ff72edc8839667de6191781

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
515B

MD5
7311330e83a86e6f4f0777298d91d81f

SHA1
4df964d07423589c0d2f83b9a3fe848b7ad1bfdc

SHA256
204e875ea416df1e96807f848d1ee840c567a7cb741e40633be055ed6aa15117

SHA512
ee8d2ebf13d49eb0d771e708d0f0ea8d67b6f997ddd76d47c9ea1b9b47f69d25a688fdecfe1a16812c5bdb40f2a726b11846b5f16b0d7e2f9fd84cc5cca96589

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
569B

MD5
1b00303b2eeb1a33b99761d2ca5635d3

SHA1
8ff3b0ea0cf9ad3712e1ecb37d21c56a4f86b484

SHA256
b4276a3726af85c2f710b8947049e363a52aad75cfd0127c3775f893700153a9

SHA512
3daf2e7560953ad0ce8a2fd98a95a80662256c8bdf005a7529bea42375d2103dc60d001f10c0571dcc245fd42235db505bd9a4dbc4405c138d6a0a844b966e86

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
548B

MD5
f52ed00f8541e98d83eb2f1212b4215d

SHA1
10c7929e9bd60a378db7da3306604992c9dd965b

SHA256
aa03bd7674aecb8fb50d5559d56e070d3024cae8c3aedbe8a96c61b7c5980892

SHA512
9a2598ffe422867802b9a470f020af0223c7521e7d8f1a39b4661f0b970d6558a70d39c4a808950c82dd6597964801e731e1f99a4f0dd61f2527c809fef88d3b

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
234B

MD5
031a58abf3d09a665df3ff943cf18e79

SHA1
2a89215c77e489c4175d4ddf70f73bffd1f445d5

SHA256
603e914c2f37dc045342afc0ea702f6b4f5072e64f3d50d3c38946f932112a70

SHA512
3ecf2717c2457872f65de939e12100934da685ced66ec58ffba4ece6d93adea4f04a6f47545009c762c43240f2336853d67219d9f1bece3034bb5f0899a6b69c

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

Filesize
122B

MD5
e3406461d4e47460597077a7cf29728b

SHA1
2f51672047febd02640e654b6b5e00050fbb5152

SHA256
d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44

SHA512
5ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e

Download Submit
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml

Filesize
234B

MD5
d333d060ada54af7a7c9706856c98dd1

SHA1
faf7456a4b03fc64e2b420e2c63ca7df709d78e2

SHA256
0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787

SHA512
152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753

Download Submit