Analysis

  • max time kernel
    2417815s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 08:00

General

  • Target

    924d6d57bcd7290f66a38a0821f3746e30d50024695e585e96827c6adbcc2b67.apk

  • Size

    1.3MB

  • MD5

    e992245b75c311b970fada61200fc78d

  • SHA1

    37a9383c824cc2c6a543136b04964b34586e22bc

  • SHA256

    924d6d57bcd7290f66a38a0821f3746e30d50024695e585e96827c6adbcc2b67

  • SHA512

    7cf29e54d126a436358ce5a1626a1f7e6a51bd92fad08122f6099fb01289e5c3b41cf38a08d66a20d0c7dde0b529a26f820e3f05a6cf7ccc58cc119b99d79a01

  • SSDEEP

    24576:1s2BhIzzQUGK9VayNYOdKwkAFnajuXw1y3/nyzeqaOe5qcJKj9l8SOC4e:q2LgQA9VayiEKwkWaEO9wOAK55XR

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.psiphon3
    1⤵
    • Acquires the wake lock
    PID:4986

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9af32e6e45cad9c22a0beff7e5a3b5a1

    SHA1

    5a29f2bc3632484e3b47e1c6f08bf5f9de1cc49d

    SHA256

    b9ec7ef3639b78ce794fd930256c63a5971d6c591a575b72c2565e88b226f0f8

    SHA512

    eccbc029247794c094a0ee62de06ac5017ef3c8097d132efb40af9487224eababd73ed51be4e681cefa2d9bb8b1041bd51fb26ddaa2f0b15368b1114ce5d1837

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a50ee54952fb5c0f31327e8b160ab155

    SHA1

    49ecc12dd33036567d4de629b10b7d13fb990f4d

    SHA256

    41bc3c42d70048855b59cc174c5333714b6a378cd2b89411a9cae7bd41647041

    SHA512

    7f50ce57f7c3c682bdda04ec63f5dbd554a0c5b2189d54d53acbfe97a7d7c108dba5a78dcbc2fa2285af79e881162844f090540a5f155df8f59dc805db14f67e

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ae0f8a8f4ca9dc3f3cb54b416091d5f5

    SHA1

    ae131904811f3eae7e4c16269fb1eee2100cdeb2

    SHA256

    254b326937d1b9c40a588027902b4ac33e54f25214d44589506814be148a67fd

    SHA512

    8b1ff90ed6004fac7680504572331311f8a2c39999104157b0dbe611e84c5d0bd3dd492278c253a803b6a845a5e8fbafc8445a4563e1d8bdef07c25606150ea1

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b14062b546e9ef98810f15ecd095818b

    SHA1

    71a64cd4bd691e14871208dc10e7a4df41570f45

    SHA256

    977d3c7c76e96099db95ad545700233b8445de8ce37e4c0ed959197372cbed50

    SHA512

    7f9b5184ff9fc7503c5ded38b5adf342098180b52ca96504ea4552e22bb6c3f37fab6463bf66b98bd6a2a487c6631c2c8d4d29aa1f248e6cb868fbade36d6e0a

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    11e1f0afbaf56bd5b0195757fad1d4ae

    SHA1

    866f4dc2604934bede993496ade97a5d46285c96

    SHA256

    417d3abb9b891d35295704a701655cf38e6fcf8d34256baf589fe3bb3b1cc670

    SHA512

    c5d7633abf629b4994fdf761b8f3fef7ffa5c40fa005a5038ab97876a176f638a853dcc6a5ed44fc67267019c05fa2b4ac255a8a2766e62ab50b0d5c1a1d026c

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    5cf88087cff43f3b6980642365bf8096

    SHA1

    e692a053e889a3582405205ed1a52dd5fb7f824f

    SHA256

    7db2531e069ed9ea3c64ceaf32c0b242431a96abf0038a3d509ca07c870024fe

    SHA512

    335e69672474ecbc79810ba77f97df9b33377061ee51fa2f7297b4033b271376afff491884dbd79105b68227457f3bb13a32d1313f93dc5e34bef0b07442e920

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c14d4eb2b0a9bcc6f96e0d6c511b38f9

    SHA1

    70ca84520dd2a429d758b9fa027d5ac18344c089

    SHA256

    81c2cf47a7b03ae8a0670e41e74924d22e02cdfbbc381d38da78f5430f281137

    SHA512

    45a004c255a889f5952ba7b592b2a4993bf82a09e368b74bc33d381574f888b8bd7e5b00b28801d42d02dbe3eff5bfe0a37dadc2969aa832e63078bb5165517c

  • /data/data/com.psiphon3/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    effc16594576ece3fb9dc14185b12b1c

    SHA1

    c87d101b727008a2d05f4ebbeddca0abf84a9ca8

    SHA256

    c1eff04663195653b3013c9dabd8d7b73aa7e96a0cd9279929f8973080a609b4

    SHA512

    052ff73fbc862d88e8f376ff6aed5280914810f2b7f7d2291eb33e76b45a1d5f312224c6ba74a2584cff16200bb286ede8aeb57e1e3044cab3f901a38245d9cb

  • /data/data/com.psiphon3/files/set.txt

    Filesize

    3B

    MD5

    cdaeeeba9b4a4c5ebf042c0215a7bb0e

    SHA1

    65c10dc3549fe07424148a8a4790a3341ecbc253

    SHA256

    6ee0eb490ff832101cf82a3d387c35f29e4230be786978f7acf9e811febf6723

    SHA512

    a702ceb437e84f953fb015c343a9ac457d3bf915b73ec4256aa9f6b348454e9c9d3393f377c2fee3067f5907561b24214beb46e8f9b6750cd24239f7b4216608

  • /data/data/com.psiphon3/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    cab41629cf85660f69b6e8c4fdc5f1d6

    SHA1

    cb6dd108ce3836ac952b029955e175af60b82872

    SHA256

    8ee0cf96a2c860ee67136a02f2f98fcdda2261bde2d68c6d5ed66a9afdacc0fb

    SHA512

    846210be53e4d4e1fdb99b6572a22c941af5382f7f88299494195569c5503ba2d196d89060622a03f9c5a9b0720fea2ae5ddf3e9fc88c8d4961f0475308e3086