Analysis
-
max time kernel
3015271s -
max time network
165s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
15-01-2023 04:36
Static task
static1
Behavioral task
behavioral1
Sample
Quick PDF Scanner.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Quick PDF Scanner.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Quick PDF Scanner.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Quick PDF Scanner.apk
-
Size
10.6MB
-
MD5
1e288142a45ebe7244ab899798cea643
-
SHA1
078295d1cda8319ed69f64b5443e4d89705d8523
-
SHA256
eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
-
SHA512
0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
-
SSDEEP
196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar 4740 com.pdfdocuments.quickscannerapp -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.pdfdocuments.quickscannerapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
-
Filesize
1KB
MD535f9143483715fba5bc51ad5e2240102
SHA17c364436de537b75ace470e0d29bb1ab264570bf
SHA2560f551926d87eba0c95a1bee308e0cf2d92f3687f0fc81437d0d617287a3d2b02
SHA5127ac3eab330e17561211204d9749ddcd25ca7c7f554aeddb04cf3034ed0a70360cea82b9308e789659ce0a0d963d9f694014989ed46b17a274f2a2fa801320bd7
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5295c710a8e28d2057658a4bc87f31f8e
SHA1a6774dd0707713e7d0696631d1283fb1dd36fff1
SHA256906bc0c3de4fd7bfc0f647a180cbd95c168c56c57852be835bd29350d2c3ce82
SHA512dfb3d3a56090a35acf69c6a41ca3d324303a4cd8b180b385397508dfe70db3a7a239227093d0c8b7f70fc2967c6d1bd463466283cd94b0f86f33759569e5da5e
-
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000001.dbtmp
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
1008B
MD59b880b7b0b5d8c710976e020d25041c9
SHA122dc59d6f9546ff80b0b6c8bace92979bcc8c3ad
SHA256d49378a46604dc8667c78f8e18d59501ff8ef2e86a20c1e7a3c83e8980c9b43c
SHA512d15cd6c2f9d720f37ee5ec8c7ef21da84cc45a093938011695375c6100ca6967f863d92c4db3436095f2aa7cd9f4600b37c580f4bb33f5dedf3c76b77252a00a
-
Filesize
150B
MD505e90913797ae70d431946d61e9ca1e4
SHA1661df858daa3c5f744ef28a6f7fcd4549c991429
SHA25609ce414d0d391299ab42a5b9afb091acf658f9b61d5d97e9cd199f135a79e142
SHA5128748db6eca3d84869808f4adb763450c2144c086bf4396f863039e3b331d49ab47d4d0311ebc111412db39873599038940328503a8819be7d3a0ad22e201d1ba
-
/data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
194B
MD5d7d9437445aa960dcea52ffe772822dc
SHA1c2bbf4ac0732d905d998c4f645fd60f95a675d02
SHA2564ff49903bec1197017a35995d5c5fc703caf9d496467345d783f754b723d21c1
SHA512335eb1ba85670550ed1e1e4e14ea4b5d14f8306125bf147a42de4def5e5f75f14c422b014414030cf30378c04f748ac875cf056adda196511a0b057b3598fe9a
-
Filesize
144B
MD59e99cbb68e1ea01918b728b06119940a
SHA1dbac6708f8e4bd4ad738ccfbc8a5717de7e6db0f
SHA256e58078c4895f8daa4159e20fd488297c53c32df3b9959e730ffa93c384d2b5ff
SHA5129b9b826b0c1becd3d32a3389c0b6d277beaf5f96b74bc80bc29fa41a5d26f5391ebf9e04a0999d3243c985099a034156ba6eaaa42cf9205e86639298c868169a
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD5f3f3434cd035003502b4c3155503af26
SHA159c4d0e721b7cc3818c6acd3106e4e728b5e3a59
SHA2568d111dbd996b52fc9e1fa28943a6e79062000f159a14d41e44b4c2dc17a8b771
SHA51270dd1b0d59619443e0884c59835f0c033655ef28ee9d13f8719028ca2d3d1df914919f218513d7a2d99dd0dad6f03e8b1e1fb2d425585573372d9cfcd35173dd
-
Filesize
38B
MD5882288ea188f7f54a7008a3c8451b3aa
SHA1efe635f80081a84dcf6dcc10ea7b06b7c7c478ee
SHA25602185f86cc9c355de53aa2da5cb10a7942618b966951e042c0e5b374a1710639
SHA512399cf4124ba9ef668ca93f19fee99655ced85c7b0e27f50f382e79d8769033c3d5bdbca79115e67a92a39550af71739203cb8a9d4e81b6d02ead67cc6c0647eb
-
Filesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
Filesize
40B
MD5c6fe63b6fc538706ce8a31a5c39731b1
SHA183d8f32f2f053831ac78894f4d722d69035cd4ed
SHA256122b50fb0268bda4b75df762342e5af3e5849dbd2471b9c44e1b7af23dd40e72
SHA512fcf0426ede03a190d955f7a19d07566e790adb7698a8b86f83267f528374316ec35ea809b4ffe8ac058f47cb7870ff47b287642bb674b35c501bc736b5db69e6
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize96B
MD5b1606affc327f1bb230a4a6d07396945
SHA1a5c87daa0f2e4e5fd33284a97af686a94e54fd17
SHA256bd390066a8567b29c7ad4602dd40000e85b3ac5cb599e6f4fe659b01304b1907
SHA5121f30d80701779ba895a525cfed20b0aa03687c97596223bd538fd98e8acc4d65c1e953d80f2d1384bfda25a17c4290be92abfcf7cf11b668e7e8948afe578dab
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
Filesize48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD59e3d466ee645ffb6dcf5091cd55b893f
SHA108a25bd374ab3602f7261046577429a6a8abd150
SHA256ca641284d21d0f1596178d485743284c99a1440a67ed0ccb55f229641a9f1c61
SHA51214eef0316ce0c86637bb347d971463b1cf0e871c87374306bb7825fcfc88fc3e25d570b46567f1c967efd85138b639c12121c91a4bbb1737f31c36a343184c4b
-
Filesize
10KB
MD59c1e7382d5a812246d05458d14337549
SHA19d8910ced301b1b7e7e4f339ca5003d5c776b48d
SHA25610383ee58a6ecc5160a7b6dbf7d34234f9fd4850c1e5ca8d241419ff83a6c3f1
SHA512100c8dff37e7d5048cbc766dfebf0ec397eca6db4261354d9b849bdfdc714d350121ff1c8be7e883af26582b657cbe408ba4d0f10bd545b2ea1d34efdaa119ca
-
Filesize
12KB
MD553fbdc276571e209cb3e1cdc141b0dbd
SHA1d116c51ef02c892d2ba7d8f03b570621dbd0a770
SHA256fe1a0f52049f4452717566434e1f3363841f2472a91a796afd63c5a9db936d45
SHA5120bc4b0aca76d7e66e2f8109d37ca3faab38e50159311f5cbc5a601dd8466170595ba36ed746e6a0118963e0a9002a738079f9869b4ff80cbd2845773a8f1170e
-
Filesize
249KB
MD584cd70b1c63199507dca621aa3a0637d
SHA10ad7a825ac3777bafa1237983d8abe4778a9c1df
SHA256fe518bd3c59d516ef2102e14f3402972c5c9e679f6fc989bb115612c64a59710
SHA51223e2607e409ed9f3209a33c9390e257c8df2b6f38fafe63408e8c368f0cda0ac48335c08b6b43ff48ddb374ff44820011ab2cbad6f3a70f7072ed2b3c297ab54
-
Filesize
115KB
MD595955ddd2c5faea9342d567bea941c2d
SHA1ea2467d3a73b48a7cc1560d569682a990b6852fb
SHA2561492f2b9dce4b63fb1e8c725fbf747af7f63f9d6776bbfb0544e0d9e14fc3f28
SHA512b73e7498d428484dec8408bda125a63abc38277c578d71e6fb8c54c57cd8d60d60e7fc662861f52d9d5f68fe97752c36e2381916d3fb0b6fb588223bc5307e87
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD5c1e3b4f8867b267309e53838bbd87302
SHA1402c7a4b7a3d412ca62daf08438a933875ec8462
SHA256bc209a09ce293f6d2d930b93b2e52a5252880ce3073fec9d5a18d9658b1a6569
SHA512c5b8fc9f244dfc9e74b8ac271d243995360197ccf6ef9c63eb410506047c43617d77084dbb39ac18430722c2ce8b507203238678ab1d10c33404c7a96d417493
-
Filesize
288B
MD5a1b148d0b6cfa346b0e7a5b8da3f71ab
SHA135288177e69f20852459f61474bf5db226ec6fdf
SHA2569dcc3724b1f3a9effdda811743793e16f92974341ae7e2ab7caf0877b6597bba
SHA51205f87bd718f91f969ca40965ad908c99cfd942cbd9ca5b5a404e4608bfd019151ee741e3d473017a4a024b0b621fe3bcee81b4542f7fdef8c042e51340cbd806
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
Filesize
40KB
MD55a621faf40dd05d5f55201d20ee7f808
SHA1ef655ff3ac151276b85085d01cde5bfb52c74ecc
SHA256ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
SHA5124de7d77332e1484df9cd641d8ae08e3c94b2025b8179094fb97fdac5be4b78734f29b4ee34f60de45d0637b7ffd045ce8426195c183ac130c65c49f53caeaecb
-
Filesize
1KB
MD581eaaca927c84658af1c883b0f8355ef
SHA150a0e494320041cd7082c49ae7a8b2fd0757718b
SHA25668e2d9e8f04b78be3f55187969c67cf8a4bb0edbd9365c3f23b1f6fb202fb7ca
SHA512fd9b5c3e6f637bd2d7c82c6fd16e6520272805a424435500a69adcf671052e54ab2b7213d5743d1fa7a2abad599a8cc8cf243a66fb14b1319f9856a23bcd0e23
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
8KB
MD5219e24996b620946ebbcbabeb7fc667a
SHA19d32be69a89fbf62adc2b48ffa74c45cdd24e3dd
SHA2566424bfcb55dde7bc5ff12b5b806ef05f2c772009f1894a50980f6c918ae5be4d
SHA5120f74b8cf25308051c538b92b70c7411234df3f9887a13a471f9577dbc500e2da8e597448cd3a344343e3093467040b872b7cc647ecbc3b8dd63651747567dbd3
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
133B
MD54a72188ab67b9a72b771fee7a9f71924
SHA12331a6da15420d01afad5686a83064eb3bebef06
SHA256a4d5aedf25890536d7c4b50dde7807a95619f211481b713f775827056708c388
SHA51215e305251511cdf0e31d8cb863183eea2d600673944ef34ee6f7571f24e35c2050b867edbfca27b29a932edf3c5ebc3077b115e49468ca70c83f0b330173886f
-
Filesize
175B
MD5187a3d405ac44853e459aa0ea08b4f94
SHA19f6e91d41ce2f53093fff367c83355c3ba60da35
SHA25601f255b6a17cb918880242e7ff4d2e593c7267788394303b7d7939330b600385
SHA5128a5cbc9d937ff839c5f4684a81189ab7cde17353e1559b57216006bca8eb8a576d30abf65d101e50a2d8c98bc9bf809d432e9a47a823327eef983e79e50a8aa5
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize547B
MD5643ae15f45f1af84a45ea0bfdd643545
SHA106149cc7684bb005e3061a070ba59d22bc5380d8
SHA2561ecaaa044290ad93d2093eb35e6978a07108ca165724c794934672a8968fdb2c
SHA512135dc9cb375689df636a049044513638a4d5c049b5c95e987646500bb15b595b53187a52b4ec973c90775a4177f1521cc3000814a0ac2acef6e9b165648dc80e
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize514B
MD54f494548be90c5218ca9dc983bec135b
SHA193a88fd9540e67503264c82383d5477be49e8eb9
SHA256afc357b94949e341e6194c346ab25f4f446a84d0352572b2b85d25454cefd84d
SHA512d89617317ce8b14219918d6fe988a95b757fb3a6d87372567ee655e3f45d0f975588917933b1d6d038e3e8c46765242af885d048e5666cb8f527e17933d179fd
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
Filesize122B
MD5e3406461d4e47460597077a7cf29728b
SHA12f51672047febd02640e654b6b5e00050fbb5152
SHA256d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
SHA5125ff542cd9f9dca12c271da8ec72266353fde132b2265d1244f3aec5f13f663b2a01d8ee65480f75db315bdb2bb055cd11d42a875e86c331f3afe7d473d8b947e
-
/data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
Filesize234B
MD5d333d060ada54af7a7c9706856c98dd1
SHA1faf7456a4b03fc64e2b420e2c63ca7df709d78e2
SHA2560f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
SHA512152757df10ed2adf33f128f750de0224d1f4a9e56606d843ce498eb7be61df4ebd08e7f4dc3dd11a385aade525046c082796dd7afcf3063834d0146f899bc753