Analysis

  • max time kernel
    2376032s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 06:13

General

  • Target

    8a6fdfcd31165b213ea79f5d67162fdf504bf47641faabb8b2dd1ac636afc6b8.apk

  • Size

    1.9MB

  • MD5

    43b37572ea7debe94c370c8c9a95d3b0

  • SHA1

    05f4804ab9e850750aee5aa81945345e847e0ca7

  • SHA256

    8a6fdfcd31165b213ea79f5d67162fdf504bf47641faabb8b2dd1ac636afc6b8

  • SHA512

    da806793b25cdd93e6e9dbf1cfeb745c44781cad816aa88d8702d6183bbb41059196a17cfee38e173a018e6341d20ed734896a3e63f1fbb3d457b23d6b3a4b4d

  • SSDEEP

    49152:XwFfdwgkQzlr5i937YXmW0q+WO48RBsOApYItTGTw+l:XwFfrk+lrMrYXmWPR4B+9SEs

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.psiphon85
    1⤵
    • Acquires the wake lock
    PID:5071

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.psiphon85/cache/~test.test

          Filesize

          4B

          MD5

          098f6bcd4621d373cade4e832627b4f6

          SHA1

          a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

          SHA256

          9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

          SHA512

          ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          b4999e662569e5f3d03e619948bfd4b1

          SHA1

          fe5c812f473484a23c1d8f46936c49a6f27bb9d3

          SHA256

          3c600666bb75fe5d8f4fd6e14891dc6c30d2492ac7fefb87eca5b7fc87703ebe

          SHA512

          035a65a99584075746e727d018899557d64164db5617892f0e0db21a31c78a7931d818e984f4a3533038ab746083cd3f6a62cff80ce4e3df069ecc1a8803983f

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          04fc84e5af1e7b6a0c4b0f803f0c9949

          SHA1

          96b5380bdb88c1c410417e35164e1ff01479db84

          SHA256

          457097422524f92c06ddabe65e1c789f61b2f2876f8a8f8f70ae0113f42a7576

          SHA512

          2595487b4f72630bb3a1c61bb828e4f7fddbc4ccca807e2771daeea5e2f3e4bc301a07234e169ee3b3fdb8a9b82052a99a320f8dfe89001c5f3c843116dff536

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          2b202d438fc45c37f9bad0cfb4279620

          SHA1

          d6cd659a096bc0b5ed76cbe167aefaee62deb9a7

          SHA256

          d6c8956be9fdb78c8e8f43cd5e9a7d353a7a824076a96f59d3f05eed5ae7de65

          SHA512

          74f5235c82fdd50c95b3e05e117d2905252e85765348571c941864d311289ef9436e6986de2e365f06b05a310f8c9d080231a39a274d1914f803bd00737f8a6b

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          d1d264d64d8ae8c1784f5fe7d320991a

          SHA1

          ed9a15cf98d945c7843409b3af2f866c430917e9

          SHA256

          ce5c02347ab03ec1d7417cfa565bf372dabde77b47aa4fd3adaecebec471a7f6

          SHA512

          a435f1933ef915ac7db2a482c5762f44d5f885d8865a3e6a4c1996ba2a33bcb82425341e599edd565a4d361d2a5a1355b143d45dc7cddea03eaadd7709103e8e

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          4ff36c0b5ec223bc9b4d2fbcb9219ee9

          SHA1

          47060204bc461226823122420cbd689ac9ba8788

          SHA256

          e989f16c78d717f1b400f373d8aae6d9fa39d2ef4ec23038ce4e084ea1ee0bb3

          SHA512

          0cd098137c64d5ae6b6233bff8a4b373df7308ae350267649c9ec017e1598a810fe853b353aa7860518787256e376d76532a560dcb70a0dc638c4bf6e0a07e0d

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          466b9590bfe51b23cc9d6284268c4060

          SHA1

          39850e2ea75c9ba5af60c671e94d7e19634fec62

          SHA256

          4f987d78a1b0f42c3e1f94662e50fe699582ecd1002578a91ee8b847ded2cca7

          SHA512

          979b3043dd71893a81d41e0bc57f9ac4b2a416dcd00b9b16db71ffe6c06308ece92a8e51b7c9a09a1fa567360bda0305a16c2ccd02d49f2006372e18dfaefea2

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          1c3b0f94f6d1ff7cc21e245423635f59

          SHA1

          15c9bf923534a536be2eb64c0f7b5bcf8cd9d8c7

          SHA256

          5f6c323c22da3b2e17fa1da237f4f07d32c7fe3c0a93d753c9e6df817dd90f7e

          SHA512

          33e48f20fbe6d6d3376b5dba7fbbcf9c53e27848142cd169daa1ee4c414c9b1fbab87e1abbbb29e6bd1f65eb5b25f32f82704799f01478a8c20b920b832876c1

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          9f938b8fcb1d29764159f8f08195b729

          SHA1

          aece66550c25a0ae3795b4f098aa176afa1b333a

          SHA256

          b404cf7f95e188c60d7046bf497f892b2e1a37c7ac2216b6944f853bd9711693

          SHA512

          20ba258514e788f9a1e32c759738a13198254e9a6ba6c74c001fb7a01ce3cef3d345867d6a59e376a7cde5b37717f42de8403eeaffe767944c9c43f9fc47fd8e

        • /data/data/com.psiphon85/databases/google_app_measurement_local.db-journal

          Filesize

          4KB

          MD5

          65d5dbd5204bb6e7017970875b3d65bc

          SHA1

          eb62586aa133a27225e101a0666edd93c9433968

          SHA256

          3a76021b3a6da677e83128d31b156d6d70ecb0fdb8ec4b37c411e414a6a28fd7

          SHA512

          849406dfdbc805cc825f00339c6fe0db81efd595ed2c3fe3ca8b762a23bd3a172739d9040f6b011e2f5ed4b867ed967b312fe5e827749b89e4510abcb1826c3d

        • /data/data/com.psiphon85/files/PersistedInstallation6183035797369271862tmp

          Filesize

          569B

          MD5

          028cb3380ddea8a746a0dd7854f41751

          SHA1

          7aa572330024f67c42f933d8bca569ecfb587c8a

          SHA256

          b61f34ca5221cd498309014dab956eb8f6cbeb6ce9282c9cf4526d9c5e00880b

          SHA512

          7e31e3470dd3ddab3512d8e819e8878d50dfa995c4622edfd97bc4db8382c62fe8591d47d05f62acc69317c57cc516065b51e67c99b283d08ea60a7774dc5ad7

        • /data/data/com.psiphon85/files/PersistedInstallation8448382169632124115tmp

          Filesize

          90B

          MD5

          88fe368e3a173609bcabf1caf70e176a

          SHA1

          c117aa0f24d3767234329c56cfcf2fce06b1bc15

          SHA256

          179a671e3438cec16c842f11e4188d97764ffca7dee859ffd1439f36daf1ffcd

          SHA512

          e6ec3ae350c3be0d54ca8d4792f6841775924e56f36aa72eb0e2ed510dc6a79f002c77c4375f5d39ac324068ddf7e790448e2f6dcd86306033196a44ec941a9a