Overview

overview

6

Static

static

6

35e3e6065d...f5.apk

android-9-x86

5

35e3e6065d...f5.apk

android-10-x64

5

Analysis

  • max time kernel
    2861138s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 14:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    35e3e6065d58afcfad630790b23425ebf64897468296a9c58f197ff1aad809f5.apk

  • Size

    15.0MB

  • MD5

    19a01182b2f64b88cab3babcb9c1051a

  • SHA1

    10b82f6fed07bdf6beb7cb08d798651658c33cb9

  • SHA256

    35e3e6065d58afcfad630790b23425ebf64897468296a9c58f197ff1aad809f5

  • SHA512

    b9c8757fa47994a7cf212ce58d462387577a2730fefb6c99001040babd2e4bde992e38bb19c4f9271152857ea876d616a1e8c3d17189180394ab41b3480bb3c6

  • SSDEEP

    393216:7oH0B/6UPUoGaDbAXCgGX9n4con4aP4P2whYs:7oC/PUoGaDMxg5W5gPWs

Score
5/10
evasion

Malware Config

Signatures

  • Checks the presence of a debugger
    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • ch.protonmail.android
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4262

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/ch.protonmail.android/databases/proton.db
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          Download Submit

        • /data/data/ch.protonmail.android/databases/proton.db-journal
          Filesize

          512B

          MD5

          5dc513e8139b3801223e6757c3ed4f1e

          SHA1

          8b38096eaee9b028a593e2e33772a228ee2fc941

          SHA256

          3e65683bf6a462837061923c3df4bccaf29cceca61ab716e825b7213c7b3a83f

          SHA512

          d83e135bf51ec06d09c8834defbd56802a96f1d5f6cc3dae006a60875f3d0ceb9ab708f3d50b377f6469ab15524369975c3bc393cf4fbd1a488895aa269696f9

          Download Submit

        • /data/data/ch.protonmail.android/databases/proton.db-shm
          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          Download Submit

        • /data/data/ch.protonmail.android/databases/proton.db-wal
          Filesize

          16KB

          MD5

          045c818920bc5c41d52437136873712e

          SHA1

          6c934bf374d577ec883abcca87e48d5256c28970

          SHA256

          efca8571e096085777cf4511eb12907123285e72680bf8aa04420302bcff9c0e

          SHA512

          9fd99f6f4f32135192fbd31e7eb605555188b512604537c06de048525cd7c3319864c86379f7535155e14e2a3491ed358424afd122db435f5dda9b1b746adc17

          Download Submit