Overview

overview

10

Static

static

7

Video_Player.apk

android-10-x64

10

Video_Player.apk

android-11-x64

10

Video_Player.apk

android-9-x86

10

Resubmissions

09-03-2023 12:51

230309-p3sdwsbd2x 10

24-01-2023 13:11

230124-qe9hyadb3z 10

24-01-2023 13:11

230124-qe3emabe74 7

16-01-2023 15:02

230116-senmksgh58 10

16-01-2023 14:58

230116-scnjsscg9v 10

Analysis

  • max time kernel
    3329127s
  • max time network
    69s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    09-03-2023 12:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Video_Player.apk

  • Size

    4.3MB

  • MD5

    54013894dcaf20181b2ca431bb9d0575

  • SHA1

    6cb71982ce39526340616a51ab45ccf46dcf799d

  • SHA256

    894723b804ae51e7294a69169f0d7b0244a18ba712fa8e3042cb63e8e58cbccf

  • SHA512

    fca6cf580c15e0e623b76fa83c9d1234d1f376a9059274e24debdab02ae6c9ab74c16be7b13c26cca810b93290405619a5a17a1dbf9d087dcea57953aa74369d

  • SSDEEP

    98304:QkrGUuVDcQJBwXBtEgQJPL8dKNPtJOvar/xGvKp2QqP2kWnRUrCvLP95cd:Q21uZckBwXBtVQ9wG/QSpLhRUrCvxWd

Score
10/10
sovabankerinfostealertrojan

Malware Config

Signatures

  • SOVA_v5 payload 1 IoCs
  • Sova

    Android banker first seen in July 2021.

    bankertrojaninfostealersova
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.exist.debate
    1⤵
    • Loads dropped Dex/Jar
    PID:4776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.exist.debate/app_DynamicOptDex/CGSbpH.json
    Filesize

    2.2MB

    MD5

    620c929c8196c891363645faae990759

    SHA1

    7afb9f0944b1ada292a0352f551136c4ed33236b

    SHA256

    c307f9d17ff1f91aa0f9256e61087d0057688a4c1a8c9c2c0ad517737110c143

    SHA512

    b0106feb245419eaf2a86bf5a3f30c9ff6fc3bc3dd23fa62dff1a47a4891ce26626c7ae489a4a8368cbae71ea99d5d7cafb8bffe9d7777bf33dfb71e3dd7a6a4

    Download Submit

  • /data/user/0/com.exist.debate/app_DynamicOptDex/CGSbpH.json
    Filesize

    6.2MB

    MD5

    1ef9b27a9dae41cca65cb3472e69884d

    SHA1

    f9ea99749a313184ab4826f9e2daee22c33c4b25

    SHA256

    7295be9efb520d79f517c68cd8d560e2b7d175d239be3a3761576ecb31f36804

    SHA512

    6d8402d6ac777c708f6fd2a0c60ee243cbd60b47c6bfcd0c29ce8c40e6c5998b537d6bf1285f6db08068b7104acc7a5b6e4a26c0a2b56c3390206d8e8c69545d

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/Cookies
    Filesize

    64KB

    MD5

    9b23e6a88d5a95f155f205cb04b93cd0

    SHA1

    b62dccbbef087a0731f226b96d15d35d8aa5e5fc

    SHA256

    f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

    SHA512

    bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/Cookies-journal
    Filesize

    1KB

    MD5

    804a0a650a3ad1ebfdcfba6a01e2b9cc

    SHA1

    4925625d4d3be8fbce5d434a1ce9fb5ce1a123be

    SHA256

    e789542a4e868549acba4f31763a58eaa7e1972cdac3c87d5742c78b135452f1

    SHA512

    4e856e1da13974831d7d7e2bed9c8bce235ddf898520bfa1de093c6cc0d98624cd8661752e5a0a9686212c00d6c62461f0aae449aeb44cd9023ec1c25deacf17

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    4f4d7c8627e2f16154e28ea01b1942cd

    SHA1

    e60fc08f22d14fad1637c9658468feafd4c71af7

    SHA256

    59d1e8fb01513ed32c0ea66e7c72f302f74b98b55fbca8a3a6672f39423e3178

    SHA512

    83cb6cbf15bdb83802521a072cf2fa1f03d7d339e009511f9f900daf1be33b138476673e178f94ee1ce26d1faa7022193a79756e90a9423fb21c00672d5e1191

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    5ea616186baba0836e4479f6c217cdd1

    SHA1

    8392adcc4b6c660a23ce357463b1da33b0961b96

    SHA256

    1defff357d017b47d625659a14ef828ef7f64302d81ec804d4d5e7094459d3e6

    SHA512

    a9dcae7e37cdc34ae2de30b5f0423a72a1f74697c21df105a4915efc1666c2fb66b082a9f434da1c2257b2bd55e0650daf24bdd3af21f2a3964d49b63beddfb3

    Download Submit

  • /data/user/0/com.exist.debate/app_webview/metrics_guid
    Filesize

    36B

    MD5

    d0e14375b626929f781f139c20d474b1

    SHA1

    d7a20402eaed61d7584d76da8f2c7ec91a483bca

    SHA256

    822cca4e886853a8296499093163b21a1667e98031931accf331c64dd0ddad6a

    SHA512

    69cbad83c1c005f0be469d026cc78857523c054fb9bca06003bfbd80b51feb09b938f81e679a580dfbed39e04b2945ec1baba21b2722df32658799be1e0e1493

    Download Submit

  • /data/user/0/com.exist.debate/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    4639f340aa962544764f5f029eccbd86

    SHA1

    1638a809ffce809d6f66752f571ab1833f2c5b76

    SHA256

    cb7efb607396a6d531f925df59e3c8c96fe9e87acb1a9bfc91ad9cdc76855e29

    SHA512

    34c5ca3286409b524bf78988a15352d517b4c183891deef799321004709e8a45761bc93940f47a07eea16c76546e5de190ac6602f1f6d5aa133dde81909bc0b0

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/2f3337478e49e949_0
    Filesize

    420B

    MD5

    f085f03e9f5e0add57fda3d499d409a2

    SHA1

    b539745684bb183e9f281568cb3abaf6221a6185

    SHA256

    2f166469a7293256f9e726bb8995a59c4a3acfd9a4d23e32a93957c49bf00ccb

    SHA512

    f6c8cadd2bf7adb204613b9023f0b8941f0dda55334e0a68783cab9da6777e737bdafabbae39711dbf6cbcd06f90a545d7ee251d6a943bfb29acbb4a72cfd4c0

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/36703fa6334dfd63_0
    Filesize

    42KB

    MD5

    4d885cf7e3889e255154e30709709a08

    SHA1

    3033d83ea3674d711b94317503b6f1fd35e08f22

    SHA256

    1d8818f33b9d14e3df63597680bb6a983c554e2d5bec62bbf4b0b17d7faf6128

    SHA512

    7cae73c1f5925f32ca308267c6e3219d0874401bf5736a100dd7cf18502a8071c7f2d136a2f2a026bdbf2b45c25d0164c48ee1b85129f77078bfc87fec3a981e

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/418ad5e834d66b76_0
    Filesize

    406B

    MD5

    5edb8fffa237e0df6c7dac6a76eb06c8

    SHA1

    522b21aafd7d63437679b33f7348ea38c4c2364e

    SHA256

    938531cf2c097844124805a7cf357f33f7c01407ac351a2379549069cac04335

    SHA512

    94e959d004bbe074f5aff9ff68c5ea59dec33ec2059cc0fafc0496f97173fa784fd327efbc5e82cf765c60555fb0e80d31b3426ebb75d29711378af987581628

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/5016ca2a78afe9d0_0
    Filesize

    440B

    MD5

    9d30d093fa77774fdee0f665e15b15d9

    SHA1

    eda5996e98273965328cfdb1bfaac93afc0c9099

    SHA256

    fe0a5a27b87462a26b22f546634bd8cfce5c67f805222f7914244d490a51fc97

    SHA512

    855ac2db75e0ac1d2310d4b9dfc2a1e8ecf459d5d51ad11fc4c5174b8d1095f02ab45b27357948f374b734fb4e2f464365c182f67ff0d8b2ecc6aeb6841d1234

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/628aa70b6030a263_0
    Filesize

    392B

    MD5

    a11692a2f1f30ec6bea040aaabc8d55e

    SHA1

    e7aa2bb65c78af453969a68f4e1cec3c087dd8cc

    SHA256

    a635c15a72ffa4d991e18f199eb32c0c255f8ba531dcfd8aeb2d4905c07a9e54

    SHA512

    83bb36d181441ed30186f3c376122ebe462463ece61c135d4249019f2d6cb96d64aeb49ca585efd6d616ee68f6ec8b50ced11d20f41a966486700a209d7791a7

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/7081ad27615f85ec_0
    Filesize

    444B

    MD5

    d471876c0b846ef1e1c2ecea6cc2b8d9

    SHA1

    1786e65b81e3a6cac04668a978d5d8844707bba7

    SHA256

    53d33bb40213543472215130f4537aecbc1c7435c73593295329d07ae55259f4

    SHA512

    f5988b7f0b5238f1835e3d56c333ee46bb4fa6a6f238665101b7a9850e293c2bf729a0127624e7f6f7d2b7cbe00b688861bee7b3c5e858957ae5eac2feefdf5f

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/86a120befb3c1f61_0
    Filesize

    602B

    MD5

    086409121e68d6b9ca5219a5c11726d7

    SHA1

    760f269c80ca5a9ae19432d2123ad86bd9192eb7

    SHA256

    447142fe76c09364ccd15e2d6afda0c28972dad406251a52ea943ef99d5ee625

    SHA512

    476d2b6a3e8780e717b91a7d7e40b774f7940ed89183cde7da56ad77ce65ed34972cecfe747b42d2d432e70af69c090b92715a86a160c03cbad68969b2e50ee4

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    83662607be013949c73e664033852346

    SHA1

    82e33658d24878cc2028dbdf5f02c98a037c1374

    SHA256

    fed2a63792132b3d50860875dccf83fbca565459493e9db884cf11abe1eb5bb7

    SHA512

    1567cf91618e6e01c1e6f1985764ec0d810757fee14826ef676cbb7cadfd30b7bec2e7cb5fe907fe4c85c5b41c6e5586bb9190142bfc680214d02d3c44e019ee

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/bbbf120220612398_0
    Filesize

    376B

    MD5

    bc0357e6a511d97ce35fcefa1f7aaf85

    SHA1

    b98cf608bcd9fc32266c1b5075ec75cde4ca0cf1

    SHA256

    c6386e9b2024fb8cf62e29520c8adecdaee2481573e8349f19a050c07999f8d5

    SHA512

    f92f09685a49905e5b5211ff43df7e8090b8467638b06ee6ba766c326daafe62fe075227171ba11d311eaea5500b83bcd80d48df26cb3df941a94a1c3cc8fb33

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/de2a0b8a9db359af_0
    Filesize

    10.0MB

    MD5

    f2e68190338b9cf2403711f84d3e90db

    SHA1

    ecc87c679851f68570d5744ebbce8e11c4c96b75

    SHA256

    25cd5ed41753b1b375f85b18189bf9f4210e17689da296fcb17014f393a32695

    SHA512

    358da808abed16708929d34cedd88bb2ee26f30bea81b46c8a71a416807a3afbcb628daf2ab7e938892e9e2bdcf31257d40f55bf9795bb6e4a2dc643184beb56

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/ec6f7511e88aab5d_0
    Filesize

    434B

    MD5

    57e13860d8996ee10d5006c270bc0c31

    SHA1

    c2fc158a0fee9322b4ac1633a2903115e6c58d77

    SHA256

    079ec218b7dffdf06a5d8c52f06538246d5d37deb6b25f63c2bd46cc07b4a3d5

    SHA512

    baf04838ee8e39f6365302f065ccf5cf23fbf6de1522c100b51199da1ff311b254c3c7e86a0dbb7cdcfd4a226cfe7796845b7bd039a6dcaa5cda15db69cb1e7b

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    96B

    MD5

    fd9a04468ffeccf4c26005441188e9ed

    SHA1

    fb7d443f7d4efd117bc7ab583b186ea69a69d52e

    SHA256

    8a9f963e669db7bdeaf695e8e9490cc5f27eacfe38eefd71e845abc91a353bd8

    SHA512

    6e88b004a5eff0698fa5c1f637a32a6d52ea211421a789032268d9466ea3c603973733f3f26fc0326c17322249a412e428e3fdfe527a6c1dccbf2338d6711a24

    Download Submit

  • /data/user/0/com.exist.debate/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    144B

    MD5

    0d83434a47026ed5e9784637a1eb0525

    SHA1

    3eba6d1310f079e07bd6877e2dd18895e2d7d1cf

    SHA256

    e1f31682a1a8d6f3552b54f2ce03b9300a40b17133b83ecbd754bc1a6d67aa9f

    SHA512

    250f34d83faaba630b9f037fc24d64e5cf7ec475079b8083bb4315f95b6a566414739f7d814c8ef169a7a87bee8da379f457b547721c8bf969c9061109afa486

    Download Submit

  • /data/user/0/com.exist.debate/no_backup/androidx.work.workdb
    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

    Download Submit

  • /data/user/0/com.exist.debate/no_backup/androidx.work.workdb-journal
    Filesize

    1KB

    MD5

    b00b9b02e318833e27e652edee901edc

    SHA1

    3ae759322091c58e573a0edc5da455d83b177e71

    SHA256

    e41b6ee70b5a1c5e8cdab93bfcae2dfad80f4fc7991c98c3ec4349bc2aa7f95a

    SHA512

    2f587a4ec75e39b62946ec37dde39af352d2ac221cad9ce6eb77011241cc4e42874f50df74ab3897efb761b9ac6a54854ef4e219321ffe50e9ffb996a90f80fb

    Download Submit

  • /data/user/0/com.exist.debate/no_backup/androidx.work.workdb-shm
    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

    Download Submit

  • /data/user/0/com.exist.debate/no_backup/androidx.work.workdb-wal
    Filesize

    458KB

    MD5

    31b1a784f9624a409cd94dab235158b9

    SHA1

    1366e4f0a164081bbbd49f20b632e770f128d576

    SHA256

    92002fab9b529e17547b887a269c5af0cba741bf3ee40c6df4125a1de009c474

    SHA512

    f8999086a16b252934ec9f4733ee4ca4fadf6c3445820bab1d06cd26946074597d8063b1128ea57f12441a3400a82cc9b24f09cdca1ec35e57151ad244ef8dd4

    Download Submit

  • /data/user/0/com.exist.debate/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    Download Submit

  • /data/user/0/com.exist.debate/shared_prefs/prefs.xml
    Filesize

    135B

    MD5

    7736f4ed63020ad4ffc2f5359a7c9d64

    SHA1

    58116665dafceb7ae0aaee3bc59717a9a5c00cee

    SHA256

    6fd2c6ee0cc04113fdff44195a45da423aa4643da5653e9220be0fe531c410b8

    SHA512

    10e555b9ff4baa4dbf8ad8fef7563e4756b194595b7794845ea54856e01745bb8eaeef9a5c67da76174fe1832025c9c0d220b49f839b3702d24f5372716a700c

    Download Submit