Analysis
- max time kernel
3796339s - max time network
156s - platform
android_x64 - resource
android-x64-20220823-en - resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system - submitted
24/01/2023, 05:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x86-arm-20220823-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x64-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x64-arm64-20220823-en
3 signatures
150 seconds
General
- Target 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
- Size 4.0MB
- Sample230124-gagspagg73
- SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
- MD5 0da3a83b7462a477e29a409bc58f1db3
- SHA1 c7526ae7e79d274fb369384d815ba5cb27915c60
- SHA512 428dca4737e646490fdcc5104456ba85eb9e9ea98bc1c37ab2af5d365958c6fc7a91e99a48cb9d302db4a05a6cf0bfffaa6fbb0e76fec569c239163b401b78ca
- SSDEEP 98304:ty3jQd9U2ffjr+xTGYOtxe4Bd2WgyVRKNZflMBd5cW:tyTYS2XUTUtxe4Bc3yCflhW
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted 4800 com.yktop.android.apps /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted 4800 com.yktop.android.apps - Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 34 ip-api.com 41 ip-api.com
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Cookies
- Size 64KB
- SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
- MD5 9b23e6a88d5a95f155f205cb04b93cd0
- SHA1 b62dccbbef087a0731f226b96d15d35d8aa5e5fc
- SHA512 bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482
- SSDEEP 48:T6YR49pU06YR49pU41+PquwIOpE+xJZFb1pU0uwIOpE+xJZFb1pU:OYusYu4vNcR4NcR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Cookies-journal
- Size 1KB
- SHA256 120ae1a62dff00c55334f31f5812afb2f8de59dc953276c3dd348d49d72872f4
- MD5 679c66cd971a57711be7b2327092753f
- SHA1 2abff8fcdf857160b3d0171862f467222972e074
- SHA512 b6f7b295ff795505737137ff90ade83e90cecc7f45968fd6ea55508a43979bb7cfc9c9d01705e70e384c5044c7bb7cc6213ad44273a55d24e0ecab43b4a01cfb
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 3cc2a1ee9375341e7ebd6bbac7ad1ebca96fda1bbbfe4ff86f8135648326e7f7
- MD5 4d09e21c9bc96a94fa34e40ba57b838f
- SHA1 6392320ffb382ad1364427131cf98bad1ba34222
- SHA512 58c12fd14376f8e7781a1c55be967d36549436ae702c9e4738c5c316b4d2a2da0f18b0ab5ada8ab2e661e2260868cb2be28a95109d33610cc11580cae214a7b9
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/Web Data
- Size 112KB
- SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
- MD5 b663831f8cc130493476d94f2d7a5330
- SHA1 043a1956ab8e40821d67043f8a9110a8eb36fb93
- SHA512 e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16
- SSDEEP 96:ozaBdUDN1uKdlXfnaBdUDN1uKdlXf/eWbT6QfBE/g7rLH4y/5AIpEgeWbT6QfBEJ:owQfMQfHbTTNbTTa2Tgv2Tgz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Web Data-journal
- Size 1KB
- SHA256 9dccbd56b55a7ad5239609cfde9e112f3095ed5216e9da5297d5b5beb45aeca8
- MD5 5149f7591bcced64257533c4c02606a0
- SHA1 557294332c6b73e61412bd8714866bfa1cf0325a
- SHA512 729cd478efef7d2e329b726fb748dd25fc80df0b324579333ddb8b567a64a840e0404cf60f963a9ac74dbd555d38b7a2759d3fff2a6eda4e7d2209948d356c32
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/metrics_guid
- Size 36B
- SHA256 fba2f4946444a497e6d2597fdc0540ce18bf75490322321bad0b4ed972124d71
- MD5 2a4b26b22aa85558ff1bfd43386b5c4f
- SHA1 2c9f6b5bcfcd4e37d317cec65811842dff4b74d4
- SHA512 77d9b76bb3fd5d1bfafe7ac8cd16b6d2e421547a9f28a9e41b3b579105f90ff59c38f4c8d3ccb65e0b2dd63d121275621ab912b8802843c10e3b64532ff98140
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 f3336b6e75aa19df4b2a4d563ba9cac222a5522262273a3df311defc27b9cf98
- MD5 803f87a345168b75b4e337d250c78b7e
- SHA1 8a6ba1096e28373235e50290da70c428c0eb2aee
- SHA512 28d98cb63af17acadb765e346677d8946058d9c2ee2ecf8731c9296f63f7b4a335a1591598e6513191511f0afcefa368c8f8c02a1799e8b32abcc4d3704e64b6
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/309ab3628d0afbf8_0
- Size 242B
- SHA256 136157532ee4c9e68ee262a5503ad63457c2c529e72f9ea3d359a188c0ed1a2c
- MD5 1587b0de64c324259f6b53209494a839
- SHA1 db8bba31e991d25931762b0f87bdab1bcde5411f
- SHA512 8c7947d684ebc16c0349514d7d7eacabbf8729e9fd0320387915bab179a3dfb9dc76c22a0086c476e37337126fc86257d10d6e10d304a819e9e67b8a468f4e0a
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 2a85b2a0a84f39f4100887d5c3433227c6c2ac663c24b5836554661d7a37bed5
- MD5 a52340ae53c9315bcda6cbfb7d6773ad
- SHA1 e0b79eeebee267793d1ad5b1d5791a05464a92b1
- SHA512 a4142b9914f46d877826682158eb99ad5aceacc93f539ee43d07292ac75087ee96b2e6bd682079e7639d425ddabf9521f5a95f848c7e0d8f6315f0f9a2fc97cf
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index-dir/temp-index
- Size 144B
- SHA256 a935535616666bc7954f8e2a82bf4a3d351d5192e46fa33f60c7bacead011246
- MD5 ab004716c043039b0bfbdcee2ee3987a
- SHA1 141bc834763b87b531cde445807973e7bbebd881
- SHA512 90d63f41b3f43b67823342b72bc862472b10a4ad36bb885de42cc6ab2829bc81f74187fe9b80cd3b4b33b9f4a7ff94d4743fa2a8a841788cfe4b2ab1760c5588
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index-dir/temp-index
- Size 96B
- SHA256 5ce141cf786761694e07257af38c4f6c8c5632c31e2d944eb3e8551aaa5c2f13
- MD5 72be83ed437fc096899ede1fe95becf3
- SHA1 a1e3d05e9934f7870787e609fddcd5f4d54a42f5
- SHA512 7673f7cf83aaff133ad5a7a4efeeabac60cc4a0b97048cb88e5fe04fee0344a1842a413d66086ac3b02778ded5d91dab0a9401fa3447f7e231da577808bb3a17
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db
- Size 88KB
- SHA256 2775d0857dce07a382d158f7b152b9b80e25796f1dbfe2c53bc6a3cc8e334890
- MD5 5a70dfabb2742512c526694ec7f76a58
- SHA1 3a1bab81543a94b6ed9854edaf1ea258f2bdb49f
- SHA512 37eb7f5a56992219f1ca52c30239af3c0f435b578df6470022437be82d77a08f30327238f6eb41ae3f929f536323a7af3d55d2807feae746b27a560d88567911
- SSDEEP 48:TZWESFXZWEShNNSFXNNSkqqNSFXqNSFXohArSFXohArSNUArSFXUArS7abCCbEaq:9WF7WFH0H0k/0k0iNiNc4eRzRo
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db-journal
- Size 1KB
- SHA256 f956ef1df662cabbdb6758fa7f2d9d7873e25a1863c544575042d8aaf95b6426
- MD5 ba0b2a42e8d5e36506018c2794abb948
- SHA1 51ea3bce43e5e8f639a7d9f0d02fdd9c865391f5
- SHA512 40f27980bf097f08a8fb79981d7ffc1605ef16d4db02dcfe9a76775b75772320192752873244fdde7e07508630061fdfed8c38aeccc3739add7d8e9e195174e4
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/files/notification-icons-zip
- Size 451KB
- SHA256 2c78812c9e5e28af7c1218a201efd048055b3b370e6830383722941661d46c1a
- MD5 316ed6f31cfbd0631df275f1a208fa9f
- SHA1 967759751a1017f4ec21d96ff95a8dfa1f0bef59
- SHA512 1d13db2ae32002a448ccfa3dd3d5f59bb356d5f70e4efdbc5b7908f3b4e9a65fa5c95e1c398c2882734604763961f983372d1ddd2102adcd6d00518bc4ac5815
- SSDEEP 12288:ZF5UZNSgsQ+ZhvnIvHA7EZZyjDbSGllZBPnxdS5y3s:jKZNdsQCVtgZZyrS6l3Sv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/files/textures-zip-encrypted
- Size 1.4MB
- SHA256 3b64c900bb89d08d0e58a1f4094f4bb7751bac738a71e8ac0f145309d60c471e
- MD5 2da8665b3972fc5d482134684a8ffc13
- SHA1 df296a3bb6aa3f1eda132399401f9e57e19b9c28
- SHA512 f56f721ec49e430ea1303dc48ea72a6084e5069bcf5750c8a09405bf69beec67c2a8e748b6f33d6afee24be784ce650f73b3f58259e956f98199744d19b72ece
- SSDEEP 24576:pEXfvXlQjn+3L0Oda0vm+Lku/+syIjBcaoLqpUDfL9+k9GQGknwxxPX:pEXn2jtQa0lku/PjyZL4ODAuLwxxPX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
- MD5 6ef709b8536878951e87c29a1518fc2b
- SHA1 24376c70b00152501b3d98df61fa7db435339172
- SHA512 96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
- Size 2KB
- SHA256 bab0e3ae8e4e487ac8fdb28218428f1dbd7f3a81d08358e90e17cee74d8bd878
- MD5 8e2dcd454b68f88dd8cb74d93683d42a
- SHA1 d50ad0e63fa301f2bed436aa181810e58a0b2834
- SHA512 2315b3659a7517bf961e649eca61b432a8163f135d344f1ec161c5891d99bf08645f74744c06c250d3c7462acc2ea1805c5ff463a07ecba201769abb6005c197
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
- Size 2KB
- SHA256 efe5b3c7d17baa0398654c9918ca4cccb0bf0684cb3368b9c3903bee539c4b8d
- MD5 3679abc5da0ffd5a6a920b4e64701b14
- SHA1 ac3ad44f36bd2577483ca5e0703f95d48c499f2f
- SHA512 d6aa6c294d672d3a80db5cc8d96e3ae8c1c621b640ed3d48bc58cb4f946b260bbf5be3dd023fba3705057ee2280d6aad4492ae8b039e6c35d06de02528d88fec
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 529B
- SHA256 06e7d64b336f1f0ea880c42753eadc16e9480c85b98b2034499830a014b3b52e
- MD5 3c94d0a630072b06230c83466fb465a1
- SHA1 000de3e1cb857abe3c3029f3749dfbf29644ca7b
- SHA512 6020d2a919cd7292d9b85865a2af9d41532f45c7dee83fca669c5bf7968e802cad15a1d0b5aa09e25198ecc94c361ea15bdefd3424639186a2abbb1083df24f5
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 571B
- SHA256 ec4648fc18b227e59d528c62faacef6a8b81ed6907e0e1cf0bc520b0ba8de563
- MD5 6809bf72ebcffc2859c9c58e4b344a95
- SHA1 e1a84b63ea9aa86753db60f34327f763063e7d3a
- SHA512 943e5836ecb2e53e47e1b2c869282c40ab9e93883cad480f328f7cba56af006821893e44f9019152d124b6a4939b478b3b63e75c2321bc68792a2254520ac654
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 648B
- SHA256 0ec7b66b964d565ad1bf1fefbf399616122d48931a86da2f02042565ecc8f173
- MD5 ec9deec6506bcb483b6ddf511a952464
- SHA1 d2459b5713186f7c3b9497b352263b0720e5aa43
- SHA512 28499259ec63e850e07bf4cc5a43d60e5515350b1308fbe45853803694ed14c8bb83026d40c240ca416055b188e07bea520aaec75316407f8339858692239b13
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 707B
- SHA256 fd14d5df0deab9be7573e487d8cc130970ef3f336928480d44f395f2f5501c0f
- MD5 913b895555c8bd2e1fb1d66379db982f
- SHA1 a316ad06840e8662a1bc0ee23975c6ad734b31ab
- SHA512 1388cdcec54a45226def0821812722041e07c5d1ffbbea534ab9d2f4351d40cbbc19acf047074881e9c1e0d6665db32c4acfddc32c27c4bdb090b56ca3b07194
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 122B
- SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
- MD5 250b4caeba60ddf53228405750ba66ca
- SHA1 422ab714feb34e9f3b4f1cbe669887bcd581ddb1
- SHA512 373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 475B
- SHA256 9014af82d99274b4259e81a2409ca16706c8c6d5502c9884dc6524be71ab4274
- MD5 ef683cf121c8e7f6ef6acd4a1018f358
- SHA1 3afbeaee20f3e4faf6eb3434550958ae8a1ae5a6
- SHA512 24c82a27c9e7d0c0045467f1844357057ce2d764e18d2a2c799a0ad1613e91ad205b124330ed891664501d5cbbc0bcfc31457699526a02436e40f85947c4b9be
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 376B
- SHA256 4f61c555906368fb75f55d6b23826afe2aa2aa04c1efd8bbbf82ae60f2b0541e
- MD5 6284f7c7c3fb306ea8084dadb368a5e6
- SHA1 c0a2f3e6d663c6c2f30c1c97b5f9935aec53cc3d
- SHA512 6ef90744b96e98ba51a038cf93fb18643c4bfd69691d1c65d9bce529ad141ec0a817fa85cb2e134876fd288bbb7186b29642ed9da3380cf680022a52388a4065
- MD5 SHA1 SHA512