Overview

overview

10

Static

static

7

Quick PDF Scanner.apk

android-9-x86

10

Quick PDF Scanner.apk

android-10-x64

7

Quick PDF Scanner.apk

android-11-x64

7

Resubmissions

15/01/2023, 04:36

230115-e8nmsaaa9710

12/01/2023, 09:04

230112-k1lfcafe967

Analysis

  • max time kernel
    3015271s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    15/01/2023, 04:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Quick PDF Scanner.apk
  • Size 10.6MB
  • Sample230115-e8nmsaaa97
  • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
ransomware

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.pdfdocuments.quickscannerapp
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Cookies
        • Size 64KB
        • SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies-journal
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 0f551926d87eba0c95a1bee308e0cf2d92f3687f0fc81437d0d617287a3d2b02
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 906bc0c3de4fd7bfc0f647a180cbd95c168c56c57852be835bd29350d2c3ce82
        • MD5 SHA1 SHA512
        Submit Download

        000001.dbtmp
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        000003.log
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/000003.log
        • Size 1008B
        • SHA256 d49378a46604dc8667c78f8e18d59501ff8ef2e86a20c1e7a3c83e8980c9b43c
        • MD5 SHA1 SHA512
        Submit Download

        LOG
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/LOG
        • Size 150B
        • SHA256 09ce414d0d391299ab42a5b9afb091acf658f9b61d5d97e9cd199f135a79e142
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        000001.dbtmp
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        000003.log
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/000003.log
        • Size 194B
        • SHA256 4ff49903bec1197017a35995d5c5fc703caf9d496467345d783f754b723d21c1
        • MD5 SHA1 SHA512
        Submit Download

        LOG
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/LOG
        • Size 144B
        • SHA256 e58078c4895f8daa4159e20fd488297c53c32df3b9959e730ffa93c384d2b5ff
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Session Storage/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 8d111dbd996b52fc9e1fa28943a6e79062000f159a14d41e44b4c2dc17a8b771
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/app_webview/webview_data.lock
        • Size 38B
        • SHA256 02185f86cc9c355de53aa2da5cb10a7942618b966951e042c0e5b374a1710639
        • MD5 SHA1 SHA512
        Submit Download

        1582435991586.jar
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP
        Download

        settings.dat
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 122b50fb0268bda4b75df762342e5af3e5849dbd2471b9c44e1b7af23dd40e72
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 bd390066a8567b29c7ad4602dd40000e85b3ac5cb599e6f4fe659b01304b1907
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 ca641284d21d0f1596178d485743284c99a1440a67ed0ccb55f229641a9f1c61
        • MD5 SHA1 SHA512
        Submit Download

        bc810d9ce0332bf9_0
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/bc810d9ce0332bf9_0
        • Size 10KB
        • SHA256 10383ee58a6ecc5160a7b6dbf7d34234f9fd4850c1e5ca8d241419ff83a6c3f1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dfe6b2497a7513ba_0
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/dfe6b2497a7513ba_0
        • Size 12KB
        • SHA256 fe1a0f52049f4452717566434e1f3363841f2472a91a796afd63c5a9db936d45
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f038e94cb33282ab_0
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0
        • Size 249KB
        • SHA256 fe518bd3c59d516ef2102e14f3402972c5c9e679f6fc989bb115612c64a59710
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f60eaf12735df878_0
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/f60eaf12735df878_0
        • Size 115KB
        • SHA256 1492f2b9dce4b63fb1e8c725fbf747af7f63f9d6776bbfb0544e0d9e14fc3f28
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 bc209a09ce293f6d2d930b93b2e52a5252880ce3073fec9d5a18d9658b1a6569
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 288B
        • SHA256 9dcc3724b1f3a9effdda811743793e16f92974341ae7e2ab7caf0877b6597bba
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pdf.db
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db
        • Size 40KB
        • SHA256 ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pdf.db-journal
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal
        • Size 1KB
        • SHA256 68e2d9e8f04b78be3f55187969c67cf8a4bb0edbd9365c3f23b1f6fb202fb7ca
        • MD5 SHA1 SHA512
        Submit Download

        pdf.db-shm
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm
        • Size 16B
        • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
        • MD5 SHA1 SHA512
        Submit Download

        pdf.db-wal
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal
        • Size 8KB
        • SHA256 6424bfcb55dde7bc5ff12b5b806ef05f2c772009f1894a50980f6c918ae5be4d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download

        admob.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 133B
        • SHA256 a4d5aedf25890536d7c4b50dde7807a95619f211481b713f775827056708c388
        • MD5 SHA1 SHA512
        Submit Download

        admob.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/admob.xml
        • Size 175B
        • SHA256 01f255b6a17cb918880242e7ff4d2e593c7267788394303b7d7939330b600385
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 547B
        • SHA256 1ecaaa044290ad93d2093eb35e6978a07108ca165724c794934672a8968fdb2c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 514B
        • SHA256 afc357b94949e341e6194c346ab25f4f446a84d0352572b2b85d25454cefd84d
        • MD5 SHA1 SHA512
        Submit Download

        com.pdfdocuments.quickscannerapp_preferences.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 122B
        • SHA256 d4c6ce38959454cb40c147cbda68d2a18cda6dd9de599ac7eeb3dcbf05a07f44
        • MD5 SHA1 SHA512
        Submit Download

        com.pdfdocuments.quickscannerapp_preferences.xml
        • Path /data/user/0/com.pdfdocuments.quickscannerapp/shared_prefs/com.pdfdocuments.quickscannerapp_preferences.xml
        • Size 234B
        • SHA256 0f956a5c5a05f1d2801e2f73220396364bfc423db2ff0a6b388ebf0df528c787
        • MD5 SHA1 SHA512
        Submit Download