Resubmissions

15/01/2023, 04:36

230115-e8nmsaaa9710

12/01/2023, 09:04

230112-k1lfcafe967

Analysis

  • max time kernel
    3015248s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    15/01/2023, 04:36

General

  • Target
    Quick PDF Scanner.apk
  • Size 10.6MB
  • Sample230115-e8nmsaaa97
  • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pdfdocuments.quickscannerapp
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4715

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies
        • Size 64KB
        • SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 896826d229020b34fd8aa94dd070f62135ba944020fa1c1958b193a591f91f0c
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 c659642bead5e9dc75dc5d7d31a6628c4a66a7e31a6800366f5b26c71f327504
        • MD5 SHA1 SHA512

        000001.dbtmp

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        000003.log

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/000003.log
        • Size 1010B
        • SHA256 cb256b2593cdded4b4e7f25a7b69fcba67f8d6cd7e9c97eac91ddb1d2aa7422d
        • MD5 SHA1 SHA512

        LOG

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/LOG
        • Size 70B
        • SHA256 a7538c4348ed6417a54fa7b8cd551ae8baa965dd60772e44a143478fbbe926ce
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 d27fed28c1bea3acb946991c004b2fdaef966a0b09980edd7b3dc4eefa60de48
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/metrics_guid
        • Size 36B
        • SHA256 87f2d3a9ed3fe4d64acbdf592ff17e1d53cd5f01f1f17527de769b4c05b0f632
        • MD5 SHA1 SHA512

        1582435991586.jar

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP

        settings.dat

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 914a5262dc2668db8dac4e4b3a7d29d2cc1d06481bed682f8a02d6c61fa05703
        • MD5 SHA1 SHA512

        8223efb232e7bbbc_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/8223efb232e7bbbc_0
        • Size 512B
        • SHA256 c1bdf14afa36b30c0037ac49f7e6cd5a47ae22fb6d1e26cdb1ee353000d2deaa
        • MD5 SHA1 SHA512

        e06cc44686ac5311_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/e06cc44686ac5311_0
        • Size 548B
        • SHA256 2561219c9cbc5ffb67c42a1d955c10863576787ee5782113c62d20fedf58af09
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 1bf4b908683ec2f14eb518ba999813ca34a614c464bc93bc96f33edb2802f908
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 192B
        • SHA256 e2c7971b4553e090b4480b9d3fb9b8b5f54249ae8f89d1d511b50c46ac67288e
        • MD5 SHA1 SHA512

        bc810d9ce0332bf9_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/bc810d9ce0332bf9_0
        • Size 10KB
        • SHA256 80f24f18bf538efd234a1ce96b6396dde5f0ce9a37a8dae1ae8e2b766b6a7679
        • MD5 SHA1 SHA512 SSDEEP

        dfe6b2497a7513ba_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
        • Size 12KB
        • SHA256 45986e8d6edea0b47fa9c411c4ac473ea4ebddf74df89340d3a36e452414ec98
        • MD5 SHA1 SHA512 SSDEEP

        f038e94cb33282ab_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f038e94cb33282ab_0
        • Size 249KB
        • SHA256 ea4e0e82c9c5c7f8041dc49e54a03c08799c4fef00297b222e05238859b3ea1a
        • MD5 SHA1 SHA512 SSDEEP

        f60eaf12735df878_0

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/f60eaf12735df878_0
        • Size 115KB
        • SHA256 645d1fd75af20e3dfccc27276791a9b09573c870f97edfc67b8d5530c2c197e4
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 144B
        • SHA256 670680b3e5dce27180e001f02674c71b1accd20e13f0fbc2c2274e64a9e5740f
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 288B
        • SHA256 9de08f29fb583e5cb69275b0959f0288d5065995eaff3df0ece95224e90f67cc
        • MD5 SHA1 SHA512

        pdf.db

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db
        • Size 40KB
        • SHA256 11878f45a4f4c11b25249dafd92b8465a2ac256ec14ff8d388675254de615135
        • MD5 SHA1 SHA512 SSDEEP

        pdf.db-journal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal
        • Size 1KB
        • SHA256 df3f1eae98e0677745ec429631cedc0d90dfb14678f19a2b85a59a2127d5bfdb
        • MD5 SHA1 SHA512

        pdf.db-shm

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm
        • Size 16B
        • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
        • MD5 SHA1 SHA512

        pdf.db-wal

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal
        • Size 8KB
        • SHA256 6b43dfa151cabcc3c0fe012fffb444e41ea97441df3a25a2c2022b4f930a3a69
        • MD5 SHA1 SHA512 SSDEEP

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 133B
        • SHA256 2fd71abf857a0a04f21dcaee099e8dbefc0c30541e1ef23f5200d8b88c44b637
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 175B
        • SHA256 6a4c042b3c17f6afffaaaf913bc4884207fe01d0c73471c8e73215d7d3551f29
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 548B
        • SHA256 20eeeade623494b552ce4bd5ba374d871776d26708e61d0f6c47443efc7b7077
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 515B
        • SHA256 461af99c2b589eed103840dae5e6808862e650a5553cf7514d7f22120f8f7cb7
        • MD5 SHA1 SHA512

        com.pdfdocuments.quickscannerapp_preferences.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 122B
        • SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
        • MD5 SHA1 SHA512

        com.pdfdocuments.quickscannerapp_preferences.xml

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 234B
        • SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
        • MD5 SHA1 SHA512