Analysis
-
max time kernel
337243s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
02-02-2023 22:47
Static task
static1
Behavioral task
behavioral1
Sample
Inker[dlandroid.com].apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Inker[dlandroid.com].apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Inker[dlandroid.com].apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Inker[dlandroid.com].apk
-
Size
6.4MB
-
MD5
ef636f3b5ea57c4e55b097d6ed277ac4
-
SHA1
d731daf913cfeba69a5ca8c2dcb5f7481a410909
-
SHA256
006ba16ebdb023271700a4dab7ea796c725310716846e8dd23d6e7c3e70c1b26
-
SHA512
14c660fe1a5b62f2fc1ba2162df52d4cf439f3a83fb08d9ead9e53ac967fa48336ed2ebf1d5fb14a161413eee55fd86e65fb3959331f293c1e8067c6ffebc851
-
SSDEEP
98304:LB4q5YpEzi5iLtsA4kaF0/wVQ5R7b1Pg5ZoTGoZvW03soB0nNANO:LB4q5sEzYF3L0/wV6Rdg5CaiW0coyR
Malware Config
Signatures
-
Removes a system notification. 1 IoCs
Processes:
co.inkerdescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag co.inker
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/co.inker/app_webview/GPUCache/indexFilesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/co.inker/app_webview/GPUCache/index-dir/temp-indexFilesize
48B
MD5db62f8a374380d41992787e8c516415b
SHA12c3fee5dbb7d71c566acf5b095bb598341f54601
SHA25652643f70ad269885eca3507322f9a2925dd713f8689a533974cfe8cec76afc9e
SHA51210b6e6b8d5fde784c7b5d12027465d53c8d76140dfe33d0cddf4817f7a36b985d32b1fda15d5e7abd767a8915a0763014200ebc9ea42ae2d2cf7cc2e762d57db
-
/data/user/0/co.inker/app_webview/Local Storage/leveldb/000001.dbtmpFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
/data/user/0/co.inker/app_webview/Local Storage/leveldb/000003.logFilesize
92B
MD523ecffa61376d108c6713c436980279c
SHA1ddbeb67f8d33512451f1bdcdc45f3eebc9a35957
SHA256e5a338faae37dff8196dbf702d082a15f163adfd8c74ab0852a57710e4746cbd
SHA512006d4b776315be3a1fc326032b1d4c611cb169ad7c6b41170d67835f86ccee4fe01c0aca212ff432ed53a99cb7bb9d915d3f9f7fa4a411569a05bf16729d07d7
-
/data/user/0/co.inker/app_webview/Local Storage/leveldb/LOCKMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/co.inker/app_webview/Local Storage/leveldb/LOGFilesize
70B
MD5aa5025fddf50c031d0601c5988e21937
SHA1711895c4be5437b187110cd29e41eb7636ff0b84
SHA256a362a5bf1d81cd3248fab7c752b4a493b92548b61ef1d75b727350bebcfef455
SHA512ced3570befeac43101b2bacf76e633d92216305c8bf769d6f2f7484904965100c03206a1f199d5b6bb56417869b67c8b6a04b8f051ed2d2c0ecc6e04ea71ec7f
-
/data/user/0/co.inker/app_webview/Local Storage/leveldb/MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
/data/user/0/co.inker/app_webview/Web DataFilesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
/data/user/0/co.inker/app_webview/Web Data-journalFilesize
1KB
MD58de79bffd1c2690fc02c009f44d2a355
SHA1f60baf6d59052ac65fce8ba7326cdb71bf7bffca
SHA256337545a872a171f0117524e570c16adf74e06409f095bfba25165ae0ab1d0fc0
SHA5122201e7a70a0acca3ebc017a5bee2d502857794b266850a86961daec19219d4e259da663f05dcdef3b23294434a09e846d6d89b896f8d6c38bb671ceaa330cdc9
-
/data/user/0/co.inker/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/co.inker/app_webview/metrics_guidFilesize
36B
MD54b0a23a10607098a2494825dbd7c7762
SHA11fed955a5607120bf7053fc362a0611b049b0bef
SHA256c928b168339a4764f1951c6a517a3d61cc540f479f622fae9eca1ac0b82687ec
SHA512c7da94ac7394a610c172ce3ac630e062de077c00ca8133562ea41cce0296cff8e5fd831b868d59f55cfe0425bc0747e85a24595c3c90aaf697b77fb4e919f897
-
/data/user/0/co.inker/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/co.inker/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/co.inker/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/co.inker/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
/data/user/0/co.inker/shared_prefs/logger.xmlFilesize
111B
MD5e34b2605f408eb85894766a35116e346
SHA1d362655e3a8806e2c43e391498b354e25f5d60c0
SHA256c0594b13fe9b7ec4f424bb7c92fb3aa57819bb5d1af2614ba5907115a7437850
SHA5120d0f002b0cf322f0a90e231abcc230a5ef9ff9b6cdf45d8c49e520bf91429e637b19693b0ccdf56c0bc42c8f2390e07327695a2f8045d89eb7099a135598172b