Analysis
- max time kernel
3796427s - max time network
170s - platform
android_x64 - resource
android-x64-arm64-20220823-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system - submitted
24/01/2023, 05:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x86-arm-20220823-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x64-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
Resource
android-x64-arm64-20220823-en
3 signatures
150 seconds
General
- Target 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256.apk
- Size 4.0MB
- Sample230124-gagspagg73
- SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
- MD5 0da3a83b7462a477e29a409bc58f1db3
- SHA1 c7526ae7e79d274fb369384d815ba5cb27915c60
- SHA512 428dca4737e646490fdcc5104456ba85eb9e9ea98bc1c37ab2af5d365958c6fc7a91e99a48cb9d302db4a05a6cf0bfffaa6fbb0e76fec569c239163b401b78ca
- SSDEEP 98304:ty3jQd9U2ffjr+xTGYOtxe4Bd2WgyVRKNZflMBd5cW:tyTYS2XUTUtxe4Bc3yCflhW
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.yktop.android.apps - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted 4444 com.yktop.android.apps /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted 4444 com.yktop.android.apps - Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 64 ip-api.com
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_dex/loader-packed(4-2-1).encrypted
- Size 160KB
- SHA256 a8a2aa2928f840d32e46ff329440830c88fab4a6a3a5197638d55bd5f8ae989c
- MD5 e288216a6bd6184e55b720c7d3cd959a
- SHA1 f4558cd951c75fd9a5a1d1f0926814c3e53ab561
- SHA512 1a38454b89795a5e15d95f6be12aecb474d5e11d9f67965f34446fb31fca26ab4cd52cd05ec5b206f83e8aef92ccd899f3cd626353e19f9191418d3cf04b6f77
- SSDEEP 3072:rKATlKw2nNkHlWksV/Y6gv9q993wuxAdUy0KaBefzCG6uNKqPpw:rKAZKw4Nj3p3Kdr6B8ekKqRw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/Cookies
- Size 64KB
- SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
- MD5 dfb2098ca7b3bf16d6f5f1e7d3839af5
- SHA1 ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
- SHA512 fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
- SSDEEP 48:T6YA9pU06YA9pU41+Pq6kLOpEO5J/Knb1pU06kLOpEO5J/Knb1pU:OYAsYAo0Nwi3Nwi
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/Cookies-journal
- Size 1KB
- SHA256 76f98eda43308226fca06fadd5ed730d12ab01ad6997ca7903c0e86bc88b464f
- MD5 f5ff983aacad8f08e4e26013c4989ba8
- SHA1 2bbd5800c39c1640f9e5c389eae2d4e6caea713e
- SHA512 b7d309d451e4ebcfa16d175c54e4ef3512f2a12afb99f9c0ab01eedbe6c14f61218841d16654699778e3d7feae39437dbabed26f2af95d3ba15ccc50ca9f7153
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/GPUCache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/GPUCache/index-dir/temp-index
- Size 96B
- SHA256 39025399524ca548d634310361b169724931ba4949adb2a1434284adcd647b9d
- MD5 2f9675e3f41826a6372bf73fc7fd4795
- SHA1 71b9ef225f53bd7ce794b5d78e391102f52651a4
- SHA512 6ff2c1d499bc2115a8c813f249a3c8f866cc6503d241c3578de925d7300ffb604df0eb4163e40e9caaa974fe0f60771e410d3ada712791b96c24fa417af80878
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/Web Data
- Size 120KB
- SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
- MD5 a48cd9324b1f8754b07f00d863b840f3
- SHA1 11c6614775b35a58f440971dfc87c8aaac6d6173
- SHA512 35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
- SSDEEP 96:yo16Cd9+Lkq26iznWTge+16Cd9+Lkq26iznWTgenaBdUDN1uKdlXfnaBdUDN1uK+:yo1/MTgF1/MTgzQfMQfzbTTBbTTk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/app_webview/Default/Web Data-journal
- Size 2KB
- SHA256 d2bc899cd8a589e32533448f91e8844c9c9172c5d5fa16a602b988bbbd7179e5
- MD5 47842266721bedd518f0c264460d59f8
- SHA1 12061457fe5f0e84b50bca0624c286cfe047780c
- SHA512 177a67fc28cd7a977ceebd02e1096ef25011fdbb200714bc1d126526a4fcd00dc31e075a061bd243962b2418272f916545f4a166077ebb420a273a17a99f7a06
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/app_webview/webview_data.lock
- Size 28B
- SHA256 fc4208e59338f1ad4ce30a2f23d9c656954f08413717d1fc366502f3cf866cab
- MD5 b5bfd7a0d19ef8d774278356e345eeed
- SHA1 48862bf44dd7a85df9b51b20e02385141e78f9d5
- SHA512 3a58ef06f0a27398f0737a02fe8ad0f7f92293b192f1b3f7e4181f8a0d695791f186e2ee9ff9784e4aeb718abd37c315add6cb3219e1beb5a48745d6aafd9eea
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Crashpad/settings.dat
- Size 40B
- SHA256 82f4178af01d65ad600d4def2c161394717b129f18d67c7a4ba1ddb57b925bef
- MD5 45b8182e7662c57d00857d33574ddbf5
- SHA1 df0ab0de560ce94074d57fbc670c54d0462a08d1
- SHA512 75504b5e195254a6fe3dc471be3b392bd093bc1b11017a2dea02745c93e53b59314093452984217681a13f5e2eb3a820c69f5780015eef0c92584145bbd926cf
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/309ab3628d0afbf8_0
- Size 242B
- SHA256 136157532ee4c9e68ee262a5503ad63457c2c529e72f9ea3d359a188c0ed1a2c
- MD5 1587b0de64c324259f6b53209494a839
- SHA1 db8bba31e991d25931762b0f87bdab1bcde5411f
- SHA512 8c7947d684ebc16c0349514d7d7eacabbf8729e9fd0320387915bab179a3dfb9dc76c22a0086c476e37337126fc86257d10d6e10d304a819e9e67b8a468f4e0a
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/js/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
- Size 96B
- SHA256 10a192692f390f61fe0d1777007f620953b59fe1ffe3a9053bee0e157f5c7761
- MD5 5611b71f31e763b6c765ba0f7269e649
- SHA1 fdf93f55dfb3ee517a8755b1a72112bcf478256a
- SHA512 7c066dc23dd7da1740f2b1d1c4a4226784717683535c6a7197da2d18af6ec2aecd0f6767065a60ad8ca36d4eb190163e243f3308817683eaf7e4b956ee681643
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
- Size 96B
- SHA256 10a192692f390f61fe0d1777007f620953b59fe1ffe3a9053bee0e157f5c7761
- MD5 5611b71f31e763b6c765ba0f7269e649
- SHA1 fdf93f55dfb3ee517a8755b1a72112bcf478256a
- SHA512 7c066dc23dd7da1740f2b1d1c4a4226784717683535c6a7197da2d18af6ec2aecd0f6767065a60ad8ca36d4eb190163e243f3308817683eaf7e4b956ee681643
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index
- Size 48B
- SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
- MD5 6d7d499960179766cd4261d12dacc411
- SHA1 e6f8553b0015e12b23cc551afe98763f3b1c9bed
- SHA512 6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index-dir/temp-index
- Size 144B
- SHA256 33222b31e7c2f829c4f5724a198fadb515ce0fdee44af16c3664abc73b3fc988
- MD5 0c17b85c47bb299090923c730100e23c
- SHA1 cd37877fde656395168c9c18ae5103bc3d3bd8f2
- SHA512 688460c1a478fead905d08e663de4d660aa7883498b9f78885011edd9e6acc30411a7a881bdc8e225483b8633882d36d5e87a4fb7289bafc8358f3cf11218d73
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/Default/HTTP Cache/index-dir/temp-index
- Size 96B
- SHA256 d84f9a6d0d34776c344f87c5eed19f5a66ed80716e69e5f6fedec14713bc076f
- MD5 635ea2003bc04944d9b7b8afbc556f5e
- SHA1 d7ddfac8a9d865af84dbc44fa80cce2da2aea037
- SHA512 ec145d29d878c1871243fe988f581242bf4ac05cf4ca0f130403e49d7587c7e8e38b27e3e2a970d2755ae6b5434274bce4e242fe2790f258527c77d04ce7e152
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/cache/WebView/font_unique_name_table.pb
- Size 57KB
- SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
- MD5 f080fa2a56ab5479d58063e5ea871447
- SHA1 4b3fd57a98916fa5784305b76ba30af26b5253d9
- SHA512 8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
- SSDEEP 1536:sdwd+YP1Q30EtKzcpHDv16mlFwxtLcPBcDAvd5GxdXBZoTG5hGrLTIoZwqMY3zSR:n+YP1Q3NtKzcpHDv16mlFwxtLcPGDAv+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db
- Size 88KB
- SHA256 1722abf516b08ad3cf349a75e113e7d7d140d542438f89b44bea4b30af7f48c4
- MD5 76248d3a50dc9b6a9dda492435a9c135
- SHA1 9d102ddac3ee38ef0c33500170f6ce2d54fbfa5b
- SHA512 ced7b38d375418c47d89d613ef72370e066446fb57ef7219e7b6a316a9dc43867fa7902b7cd1169b77c023d45a0864211fb0a32d7372af4875f451b77418fa3a
- SSDEEP 48:TZWsSFXZWsShNVSFXNVSkqqVSFXqVSFXcArSFXcArSNVOArSFXVOArS7abCCbivL:9WN7WNH8H8k/8k8ggEQeR3RE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/databases/google_app_measurement_local.db-journal
- Size 1KB
- SHA256 25753b186d1242f569c112150fbf83c4a1fbe71165153b2b9c2e3e8fc6b46b19
- MD5 c7fb9f1cc9b1597c0b75940f94ae5839
- SHA1 3417fa53de33eb7b8f35214fec4d1fdbfac5a540
- SHA512 94b1fead76dbf8469aea0f00d674dce1c4eff6900e80e0a24f12b5aabf1980933f357665787f9ed2307bde21b21d89b5e587aac62999187d0cac4bd113272a4b
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/files/notification-icons-zip
- Size 451KB
- SHA256 2c78812c9e5e28af7c1218a201efd048055b3b370e6830383722941661d46c1a
- MD5 316ed6f31cfbd0631df275f1a208fa9f
- SHA1 967759751a1017f4ec21d96ff95a8dfa1f0bef59
- SHA512 1d13db2ae32002a448ccfa3dd3d5f59bb356d5f70e4efdbc5b7908f3b4e9a65fa5c95e1c398c2882734604763961f983372d1ddd2102adcd6d00518bc4ac5815
- SSDEEP 12288:ZF5UZNSgsQ+ZhvnIvHA7EZZyjDbSGllZBPnxdS5y3s:jKZNdsQCVtgZZyrS6l3Sv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/files/textures-zip-encrypted
- Size 1.4MB
- SHA256 3b64c900bb89d08d0e58a1f4094f4bb7751bac738a71e8ac0f145309d60c471e
- MD5 2da8665b3972fc5d482134684a8ffc13
- SHA1 df296a3bb6aa3f1eda132399401f9e57e19b9c28
- SHA512 f56f721ec49e430ea1303dc48ea72a6084e5069bcf5750c8a09405bf69beec67c2a8e748b6f33d6afee24be784ce650f73b3f58259e956f98199744d19b72ece
- SSDEEP 24576:pEXfvXlQjn+3L0Oda0vm+Lku/+syIjBcaoLqpUDfL9+k9GQGknwxxPX:pEXn2jtQa0lku/PjyZL4ODAuLwxxPX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.yktop.android.apps/shared_prefs/WebViewChromiumPrefs.xml
- Size 127B
- SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
- MD5 97ccd9a2b2063143df56b6937f961ca4
- SHA1 5e78a91ae5df289ce83443cb7d5589dd3504fb5d
- SHA512 86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.appid.xml
- Size 2KB
- SHA256 65b75110b5522bd0cf5405ad61c480b1aa6474bfe6ceb17041ecf3d20d5a0e8d
- MD5 96db1aa70a3195b9773995b3e8c801eb
- SHA1 fa543999f836239469f87988f8e566884976d6b7
- SHA512 4c61e229b846433354080ebc744ab2cb4285535589bc4ecaa4d348485823e369db3a07d6eb417c023fbf2ad0a0336b640b9df4a39f6a610ae56a33c19480e5ac
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 571B
- SHA256 d38d9e6e21f672e09f7bed4d04f7e593723e198e1f1ecba7ae2d40c962cae21c
- MD5 c17c1de540eb8a4030c998c67b048643
- SHA1 d745ac81292bba8aab3d4f6807f20d2804cc3ee4
- SHA512 90a0cff709e09dc2ed97b57a3d5838a3cc00adac79b533f5af02f68843c7c32284f780cd323adbcf6ad7cf34c6fd6dd4aa43fadcf9f9524419ad579cc8763c68
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 648B
- SHA256 4d438fa0c2122836b60acc50b04b55440cc4416c317ea1902525b6983a9489ba
- MD5 c2bf2dda71773f788ca5bb1ebb93634d
- SHA1 38fe4a946424cbee3b14d9fdc42f7299bc1bf8e2
- SHA512 dd41ad73958e8876326418f851876ac5578cb22f2b44278fe612709931054b1970ef890461d74690ea887e854b8fc171930b4c90dfbdae84f13af9f2b48e47d6
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 707B
- SHA256 9494d8aa674c4a8f31b9f7741197d91281c9a19d14692a479bbe10a1de40d162
- MD5 d8099f2d8fa47a79ef5c561303172bbb
- SHA1 acb40caeff6f2670d4f3a8b47a557f701956eb85
- SHA512 b8df72c57c4539f81c763e9d6f041192522ac4375f47648d0fdd789dd55101ce11db68b4c931bfe34aab1c3f1dc344dbcc752a916cd48d49bbd816656fec8183
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 122B
- SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
- MD5 250b4caeba60ddf53228405750ba66ca
- SHA1 422ab714feb34e9f3b4f1cbe669887bcd581ddb1
- SHA512 373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
- MD5 SHA1 SHA512
- Path /data/user/0/com.yktop.android.apps/shared_prefs/com.google.android.gms.measurement.prefs.xml
- Size 475B
- SHA256 be1eeca6a51ececae0dc185722f0562f71dff0412e00c9945dd9f27a00800d78
- MD5 511264619a18078f83d670adf9aaeded
- SHA1 107cd278e15ff1437a8fd89eb8c3a00dd64ff34e
- SHA512 54f3519c6381baabe118f830ff80f31a79f4264cebdb145d9a4a6379dea2d2b1847db90bb9f9b9b3f97db389ba66e757eb2c959a61e3306bff6969bfb237e06f
- MD5 SHA1 SHA512