Resubmissions

01/07/2026, 07:20

260701-h6bf8aaz4t7

24/01/2023, 05:35

230124-gagspagg737

Analysis

  • max time kernel
    3796427s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    24/01/2023, 05:35

General

  • Target
    4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
  • Size 4.0MB
  • Sample230124-gagspagg73
  • SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.yktop.android.apps
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:4444

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        loader-packed(4-2-1).encrypted

        • Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
        • Size 160KB
        • SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
        • MD5 SHA1 SHA512 SSDEEP

        Cookies

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/Cookies
        • Size 64KB
        • SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 76f98eda43308226fca06fadd5ed730d12ab01ad6997ca7903c0e86bc88b464f
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 39025399524ca548d634310361b169724931ba4949adb2a1434284adcd647b9d
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.yktop.android.apps/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 d2bc899cd8a589e32533448f91e8844c9c9172c5d5fa16a602b988bbbd7179e5
        • MD5 SHA1 SHA512

        webview_data.lock

        • Path /data/user/0/com.yktop.android.apps/app_webview/webview_data.lock
        • Size 28B
        • SHA256 fc4208e59338f1ad4ce30a2f23d9c656954f08413717d1fc366502f3cf866cab
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 82f4178af01d65ad600d4def2c161394717b129f18d67c7a4ba1ddb57b925bef
        • MD5 SHA1 SHA512

        309ab3628d0afbf8_0

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/309ab3628d0afbf8_0
        • Size 242B
        • SHA256 136157532ee4c9e68ee262a5503ad63457c2c529e72f9ea3d359a188c0ed1a2c
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 10a192692f390f61fe0d1777007f620953b59fe1ffe3a9053bee0e157f5c7761
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 10a192692f390f61fe0d1777007f620953b59fe1ffe3a9053bee0e157f5c7761
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 33222b31e7c2f829c4f5724a198fadb515ce0fdee44af16c3664abc73b3fc988
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 96B
        • SHA256 d84f9a6d0d34776c344f87c5eed19f5a66ed80716e69e5f6fedec14713bc076f
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.yktop.android.apps/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db
        • Size 88KB
        • SHA256 1722abf516b08ad3cf349a75e113e7d7d140d542438f89b44bea4b30af7f48c4
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db-journal
        • Size 1KB
        • SHA256 25753b186d1242f569c112150fbf83c4a1fbe71165153b2b9c2e3e8fc6b46b19
        • MD5 SHA1 SHA512

        notification-icons-zip

        • Path /data/user/0/com.yktop.android.apps/files/notification-icons-zip
        • Size 451KB
        • SHA256 2c78812c9e5e28af7c1218a201efd048055b3b370e6830383722941661d46c1a
        • MD5 SHA1 SHA512 SSDEEP

        textures-zip-encrypted

        • Path /data/user/0/com.yktop.android.apps/files/textures-zip-encrypted
        • Size 1.4MB
        • SHA256 3b64c900bb89d08d0e58a1f4094f4bb7751bac738a71e8ac0f145309d60c471e
        • MD5 SHA1 SHA512 SSDEEP

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 65b75110b5522bd0cf5405ad61c480b1aa6474bfe6ceb17041ecf3d20d5a0e8d
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 571B
        • SHA256 d38d9e6e21f672e09f7bed4d04f7e593723e198e1f1ecba7ae2d40c962cae21c
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 648B
        • SHA256 4d438fa0c2122836b60acc50b04b55440cc4416c317ea1902525b6983a9489ba
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 707B
        • SHA256 9494d8aa674c4a8f31b9f7741197d91281c9a19d14692a479bbe10a1de40d162
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 475B
        • SHA256 be1eeca6a51ececae0dc185722f0562f71dff0412e00c9945dd9f27a00800d78
        • MD5 SHA1 SHA512