Analysis
-
max time kernel
2772105s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
12-01-2023 09:04
Static task
static1
Behavioral task
behavioral1
Sample
Quick PDF Scanner.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Quick PDF Scanner.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Quick PDF Scanner.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Quick PDF Scanner.apk
-
Size
10.6MB
-
MD5
1e288142a45ebe7244ab899798cea643
-
SHA1
078295d1cda8319ed69f64b5443e4d89705d8523
-
SHA256
eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
-
SHA512
0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
-
SSDEEP
196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar 4590 com.pdfdocuments.quickscannerapp -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.pdfdocuments.quickscannerapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
-
Filesize
1KB
MD5f37430e33b4b77a116a3b6167d466f40
SHA113a5fe65f2f8541691338ac3f4c71eb9c92fa2df
SHA25687d09653e7453019c7c7ffb3a4172c7ff56783a01490a8159eb4c748aabac8c7
SHA512d42afac52d1be4aa538d185e5ba8cb86ae23d2853fe13230d87a7a765e43bd72282e1104ba24d459f20368cd96c8f2f6d3bb177023fe50cc9d01c10abdb92a6c
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5911da97401427c1ae9fddc84c4743f2f
SHA1c575928795e019576ae8a710849a15ec7b5ac416
SHA256ed0f8f012a1b2fa465f2c75c95f0ba67035aa9c673c0c2827b3f8de0368f1046
SHA512776f9c4ca306b3e9060ba9828fe63def6800c782d94c588071c86bb16195f39542e643ecc7919b60bb04d7f0af0545162b982b76939158a37ad3e23767cf025a
-
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000001.dbtmp
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
935B
MD5e8d2554b0572178014ddc6dcd7d7e335
SHA19a131c87eddbb3a5247d55f6c9b529632bbb1830
SHA25638f4e63d116626657f68ef1dbb08303f1d2c5005612952f3f98e167b7f504a9e
SHA512d8514109030652db11e2490acafe6da7f4be8867dc05d05ebe265aa02e8a4289a7b6e906336e867aadb0847f5db344da98f40f7ea48e5f4c68d5871313178cf4
-
Filesize
150B
MD50be87b94d9daa72a19c86ec8811d4476
SHA1c93dc3c3f56d833601d4d3198e5d294381f6f2e0
SHA2560b80b6796738bf4b796d68578794b8b2a6b0dd145301385e1f9fe5464e169919
SHA51224a10a0dd5ac997f3e91208afdd7d6dc4f4a93ec740e167c899a0d6dacbff19aef773cf507d42b1c94c7157a6809d11fe4993da1c3109f105b5260725400aa98
-
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
213B
MD5046cc08d163fc4578cd1b77a5d0965ac
SHA192f503e605c30974baf385f1619f1269b81dec57
SHA256693a60684aa9ff4f01cb6027e9c938f4701c0c898afc224a0776cb1e18e87166
SHA512e8b1df36a237bcbbad897146ca247edf75466b2a4030fec620c46932b5c31137f2931cd2758534e4308aed3fb9cc40edf2d7646a38530bcc5e6d7069c19a3b1f
-
Filesize
144B
MD52af530ce9bf74f614d773c286511ce99
SHA1a84d584640cf3353281cd4a258a3d06ec244429b
SHA25622877f1678307cb7437f3473d7a8514da635435c0be1720fd1d5ba6e7cf8b45d
SHA5126ef97e46922e9e5bb30abbf90cbbaf295ada2c4cfc8a619a89d55fd4ed4428300f91f6b75992a8682298f4ae3b3919b3e0dfc40a7a08eb734b6ef4351df1b4e3
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD5d55d0458a15bc2ef520b8305b4e1d0d1
SHA1ec747fbcb23c9c6919491724ba17fa9d7d6080fa
SHA256776382485fd231488b44afa33d43c3abad3c7848b5fb897e487ab3e88844d187
SHA5121f83f90676018b317774d3a9b5774bc231d92c3f1fcdc6d777900d4ff628ed203a6a46f578cb6a86f2dfe85f79d7c64b95ad3a6bb5d34400b948c60ec737121f
-
Filesize
38B
MD5bbe5e29baba7a7794d8a28cdb0d239e6
SHA14f05b1e93b23a6b0fd05a8da7bef1a182629747c
SHA256e2cfc89e10d493f5d2a0f7da9794d951e0caa27069537309b4471dd1b53c64ca
SHA512a31bd8c4e84ec1662d050dc6757b3715b3477e6b7642cd04896366e499fcb101f3d7b861838df545f548c7071de1fee87fa3b2544efef0f6be109418caa663db
-
Filesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
Filesize
40B
MD566e2fd1467725137753abcda122d6c77
SHA1c033b54b72e49ce0224988a917d616388a48b8db
SHA2563f9d45c8c338ccacf3d1016f9ca1f944c2f8280317b08224f322618e96e70c14
SHA51291403ba6c4496a8242aa5cf1213c6f1897469d332d0edfb587fad53ebd78e15f19ffd2013a9032a35cff79b8584416b50ed1ca02ac66819a6efd9d819330cb37
-
Filesize
10KB
MD5840a03643bbbf64be6415185041871e2
SHA12eefa7a8b2fb149459914111f37d9ff583b2202e
SHA256b1f5ced2c75e312106806b3929db34873f42ddc688225da964fa285aed6c7e2a
SHA512b776102da24b08506272defea705c8c6ca466334cba2fe57a0f96e868a0d0b0d9d47e950f331f0569d8cb0841d68865610f912f2435c004653a9c88e0e94f74f
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize96B
MD52cc7e4d7d738870594367777e286aac3
SHA15c2f6a33379a7e513362ce9ffe7520c7c2d342f9
SHA256129881bf86c464155cb5726e921161e66a0335a8fd0c3ba621b0529e0f9a97f9
SHA51214fb7c4c87f8127469702509c8b8ef19f2ecb194b608ee5d85d1980130a55dabb2645fa27fe493bf42163659a3da7f9ecd66c242f0e98fb19567f5d24e0806ca
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
Filesize48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD5da8eaf665df9cf06e5c9d57b49d8e267
SHA16a1b6dd586e62c666eb1a5f866d4ca159ea906cb
SHA256b95f27a0c2728f8d005f362acad71223d4fa0c351b2434da6c195b52162b34ab
SHA512ce470a6ce3304e2082e982d57b95cd8f87b4a0d4f57254fe161a5e2d2a90ef85ef36dc15366323954d049e10005daa7dfa485f838571a866e3f3396a16329eab
-
Filesize
12KB
MD55cfbbf6c33aea722740f9f69644c660f
SHA1f87d0290549597c0beb26009ccea95c00b7ad675
SHA256b1ba6e1165044b8a961fd8df40c035cb6ec986c30ff80274ff69ba5860bc95d6
SHA512831fe05b8d742960887f047fd81e5ede12ffe44a98c8a3f3ac69967bda8da7b039a8240880f0ac45fad3552012a8f17bea9155c451abaa3543789e3650c7c2ad
-
Filesize
400B
MD5a62b20c6608b3694260e345c1d80b467
SHA1ea6bec313d9a059a7f4e1e72bf8cfbae621846d8
SHA2566da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
SHA512f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b
-
Filesize
249KB
MD54f4f5bf50639c744aeffd58ed14c61f8
SHA1d2d0ccea6588a5640853c710a7d850d9c0e5fa87
SHA256b8f8dff3044a82ad0bd8eff5d8a46c8efef3b9ac5a6f38f5a8e8af6c31ed0921
SHA51206688356095d96d77638db7ffb2d14bcb8a462914f9550b26d504b815cfc233ec7a77dcc21f5c8334eb14cf97d9bcdbe0493bc83b576f20d3e1938024e896a2a
-
Filesize
364B
MD550e4f810044b1bd5ac5620cd68ed335e
SHA16c1a59447f60c74e1123daa2235194d52eb0a818
SHA2568d4f20d754da7886e6d63c4b92276e453b8e5b71bcbd7c8ad47288d0661c499a
SHA5129e99022e524755f96943f0a02279c6b3325a2f95dba05520f8aade888c239fdb1a30e5de4e918d25c7d5fc987c24c84f0f10e3403d0705b0335aff584829d6cf
-
Filesize
115KB
MD5af35cc057387f1c333bebda0077c0f5a
SHA1ac240389ec57788972ea4a117fc2a5f9bed4c46d
SHA256824ea5b41faf1691cc83d007456633aede9d83ebd573adc6580396085fda31fc
SHA512ceab8f248dd444360402ff6523cfc3c7dd508cd263b8e3081ae0e015611cf9db94a23a5356591a425258a06c129b48df14e21859967a8e3555e0ced1f2f736c8
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD543d47b52efb21ef99b3e4fbbdc6216b7
SHA1c37d353d9b4da4125ced7f012be67b1a8abe9224
SHA2562d4fcc89e4e12f25f0331461d2aad01d0b154c46655de990810b5d14971524e7
SHA512184583e4b89d9e72dedce1dcd8ef1689287e67958ba3113db2a86f0de73f3b942c42cafef78e0d1d0028b2ea3a480b6281ee7a50a9879867ed1e887ccdf64349
-
Filesize
288B
MD55bb7c9f5cf4acb53c13acb6510c4ee06
SHA1b7dd7c5c715f75007ad264526f902dff4d9f7070
SHA256d15c0f718e776b6c1820a689d526a291690afc11bba8956e7d0a7f73b1d69af3
SHA5122b7e53d268e8636f149715ee6bd89135a560cf092711e2acf20bbfcb55f034e2fe0304fd1218565ee2c37c80b753492a1dab94009fcc63546654e55f0c2a8385
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
Filesize
40KB
MD55a621faf40dd05d5f55201d20ee7f808
SHA1ef655ff3ac151276b85085d01cde5bfb52c74ecc
SHA256ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
SHA5124de7d77332e1484df9cd641d8ae08e3c94b2025b8179094fb97fdac5be4b78734f29b4ee34f60de45d0637b7ffd045ce8426195c183ac130c65c49f53caeaecb
-
Filesize
1KB
MD51762bb819df58f79c4b41baa85cb2b05
SHA108ff5103fdc246e9446b6bdf0e425e3cc4556a4a
SHA256382f25e5046fc203433bdd64d62b26c90211b0e53cea13d0e615ce301f06dbaf
SHA51276615dfd2a0aea0604a49702c2792b0a3b6b498cc8fa53782698a67633e7ad4f320be829a33aca0d9b7eba5cbeb92797c3c3e46a403c510d6ce8dc4b9349b5d9
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
8KB
MD560e6311a0efa24eb553b5fda740b8e9a
SHA177fc9551b4172bd154d490ac1328a7222ef1c21e
SHA256db5df1bbfcabfed58e801105b0f906809a0a1764d7c69569f3da76f27b7916e8
SHA512db95245150c2abbda15293403c3c75b7a970e1656360f412562504dd7e972cd8314e0308e63616716aed778fbbe1bf83dffda635e45cc61e3c56f3b184cdcd8e
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
133B
MD5257bc414fa3f5aec41b040998cd22902
SHA13f9b9f834c33c8973c3374dbbce0a9ba579418ce
SHA2560df62825dec9b7d8d425f60da3bb20db5ca01a6827bc7f6ab91f19c16c40f362
SHA5125a840e54329bbac3e99f1682da558f1df8356fa743dffa3b521fb12526abd4f741e5c13160031e9da849e63545754e3c7027bdfa2c2883b2d616a7bdbaea945c
-
Filesize
175B
MD5f1e34facbed935cb96ac869a3d70d484
SHA109f4425594ad828408d8bf5efb6b7306d7b73cbc
SHA2564bc74de3ef726f90f24bb2eb3d0a67a5752ef2bd298fe099a8e6ded58646c4b7
SHA51230e669da77a1c3007d725a2139d3c1ca61daa55cf88f59e9a941bdf487aa26ab68ba8c2816f2f8f2e318ea4f498a2b9de31e607ea2da1d9749183ab401599430
-
Filesize
222B
MD5bdd885e6253f71c60ac69a184bee3c55
SHA17ec527aff50022faa59add8381d774ff77d39edf
SHA2567d61612130f655f3031c08152cfc93a9946e3fb7a55a5a30ecee4579625b7aee
SHA512112ca5dff808265216cc46ef9152729b8bc62299bf6bd5f9ff19b5702fd1b8dc1afb0aebdbc03acd76c5e7a4770c5bf778d69f4c8443062e99e23b0a0ebc9526
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize547B
MD51a4c2137fd9881cca508c0cf4c353da0
SHA13303e97bec38693b4d640877a04d384ae8e4fd2c
SHA256dfc8d42f4ab782c7ef53c1fb2a970d95866b009bee948e01c9d809e71b0d657c
SHA5123c9327f93c7f90789c784cba5e4a1ebc15b0429ed6db62133650c8bf34da7783ca27bcf285fffcf82ab96b262133cac11b2bc9c13aaea582a2811db0743b4109
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize514B
MD5d7b87c43125e0308f48681504ea9b4f6
SHA1be42f4285ca95f0a1f8c3bbd366851d4913a9b99
SHA25656343e3eb05b82287c2c02ff1a00c8e8dd9a7e090388ec5ae7bf2f842ae4b92a
SHA51242fb12fb20861b68f3ddb90f64cbd4021b32cf44d3b90e020c8622d5d026c1ebac92a2bf6154c9fc14abdc66893be0e073314de7bbd77c2d3b50141e64b56dda
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
Filesize122B
MD5e3406461d4e47460597077a7cf29728b
SHA12f51672047febd02640e654b6b5e00050fbb5152
SHA256d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
SHA5125ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
Filesize234B
MD5d333d060ada54af7a7c9706856c98dd1
SHA1faf7456a4b03fc64e2b420e2c63ca7df709d78e2
SHA2560f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
SHA512152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753