Resubmissions

01/07/2026, 07:20

260701-h6bf8aaz4t7

24/01/2023, 05:35

230124-gagspagg737

Analysis

  • max time kernel
    3796339s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24/01/2023, 05:35

General

  • Target
    4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
  • Size 4.0MB
  • Sample230124-gagspagg73
  • SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.yktop.android.apps
    1⤵
    • Loads dropped Dex/Jar
    PID:4800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        Cookies

        • Path /data/user/0/com.yktop.android.apps/app_webview/Cookies
        • Size 64KB
        • SHA256 f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.yktop.android.apps/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 120ae1a62dff00c55334f31f5812afb2f8de59dc953276c3dd348d49d72872f4
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 3cc2a1ee9375341e7ebd6bbac7ad1ebca96fda1bbbfe4ff86f8135648326e7f7
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.yktop.android.apps/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.yktop.android.apps/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 9dccbd56b55a7ad5239609cfde9e112f3095ed5216e9da5297d5b5beb45aeca8
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.yktop.android.apps/app_webview/metrics_guid
        • Size 36B
        • SHA256 fba2f4946444a497e6d2597fdc0540ce18bf75490322321bad0b4ed972124d71
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 f3336b6e75aa19df4b2a4d563ba9cac222a5522262273a3df311defc27b9cf98
        • MD5 SHA1 SHA512

        309ab3628d0afbf8_0

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/309ab3628d0afbf8_0
        • Size 242B
        • SHA256 136157532ee4c9e68ee262a5503ad63457c2c529e72f9ea3d359a188c0ed1a2c
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 2a85b2a0a84f39f4100887d5c3433227c6c2ac663c24b5836554661d7a37bed5
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 144B
        • SHA256 a935535616666bc7954f8e2a82bf4a3d351d5192e46fa33f60c7bacead011246
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 96B
        • SHA256 5ce141cf786761694e07257af38c4f6c8c5632c31e2d944eb3e8551aaa5c2f13
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db
        • Size 88KB
        • SHA256 2775d0857dce07a382d158f7b152b9b80e25796f1dbfe2c53bc6a3cc8e334890
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db-journal
        • Size 1KB
        • SHA256 f956ef1df662cabbdb6758fa7f2d9d7873e25a1863c544575042d8aaf95b6426
        • MD5 SHA1 SHA512

        notification-icons-zip

        • Path /data/user/0/com.yktop.android.apps/files/notification-icons-zip
        • Size 451KB
        • SHA256 2c78812c9e5e28af7c1218a201efd048055b3b370e6830383722941661d46c1a
        • MD5 SHA1 SHA512 SSDEEP

        textures-zip-encrypted

        • Path /data/user/0/com.yktop.android.apps/files/textures-zip-encrypted
        • Size 1.4MB
        • SHA256 3b64c900bb89d08d0e58a1f4094f4bb7751bac738a71e8ac0f145309d60c471e
        • MD5 SHA1 SHA512 SSDEEP

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 bab0e3ae8e4e487ac8fdb28218428f1dbd7f3a81d08358e90e17cee74d8bd878
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 efe5b3c7d17baa0398654c9918ca4cccb0bf0684cb3368b9c3903bee539c4b8d
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 529B
        • SHA256 06e7d64b336f1f0ea880c42753eadc16e9480c85b98b2034499830a014b3b52e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 571B
        • SHA256 ec4648fc18b227e59d528c62faacef6a8b81ed6907e0e1cf0bc520b0ba8de563
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 648B
        • SHA256 0ec7b66b964d565ad1bf1fefbf399616122d48931a86da2f02042565ecc8f173
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 707B
        • SHA256 fd14d5df0deab9be7573e487d8cc130970ef3f336928480d44f395f2f5501c0f
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 475B
        • SHA256 9014af82d99274b4259e81a2409ca16706c8c6d5502c9884dc6524be71ab4274
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 376B
        • SHA256 4f61c555906368fb75f55d6b23826afe2aa2aa04c1efd8bbbf82ae60f2b0541e
        • MD5 SHA1 SHA512