Overview

overview

8

Static

static

6

IPVanish-M...om.apk

android-10-x64

8

IPVanish-M...om.apk

android-11-x64

8

IPVanish-M...om.apk

android-13-x64

8

IPVanish-M...om.apk

android-14-x64

8

IPVanish-M...om.apk

android-15-x64

8

IPVanish-M...om.apk

android-9-x86

8

Analysis

  • max time kernel
    690s
  • max time network
    605s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/08/2026, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IPVanish-Mod-v4.0.0.8.139194-MOD-gamekillerapp.com.apk
  • Size 30.6MB
  • Sample260802-vm651atta1
  • SHA256 9c1dc4093e0e4a050cb7dcfb692f440d3973ff7812a8f61d74b3360eb012c762
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

Processes

  • com.ixolit.ipvanish
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4759

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_media_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_response_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ab1c004adaa47a91fb4e48c39e42248bd0554e6f24aa09bc3a0640a6b9b2d84a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 898e8fd47453b8324fdc7814293f6696bd0ac8a96581a7fdbc59c6ae51a15e0c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a919f8eec9607d18b87abedbe24c28a2e5e9417ddf6df37e769c00332e2a5279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9467a6b00d83dea8b719b04ff59c4cd60293ffe55c587579f5ba3a029e189ed7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 52d43b1940ed8fb6ff1ae4263531d5dfef5e9e1a05d77a387120dbbe0dcbd722
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e976c2aefcbd3347f2494073b93e782f6c77b630640fd4311eda79eb67dea08a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ab89b8cf31539677f8c2d1a5f584619fb642e2b4c41eae407cb3a66ec130fdd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d95fd55a5703617c840c3fb2fe67266122c28b835a26e08ab0f8497d366366ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 49a8cf7aa3e769487f66683f4ccf96c8d51768e1bbd79ca4bd625be79b0baad6
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3a066b78c4511c1e1df77ad758ed33664c605b1531bfe5a9e258a1694f0041f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 bfed722ee19659c9d817e4dcb45d2a894ad3ac7741dd0a7d44992dbf92ee51cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4212fdd50b4207f8cbe600e29fa0efcf8cac429dcda77c89f6e70330523174ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7b6f3b63fa3869a3c5cf66589cf2d30dd66485386e04ea1613ce026a623de244
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c2ca2277627700257b0d4007104c60c78e310414fe7a125618f1f582682acd09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A7333EF0362-0001-1297-F293796E86FABeginSession.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF0362-0001-1297-F293796E86FABeginSession.cls_temp
        • Size 75B
        • SHA256 2d72ecd938aa1df7ef402d8ed326dd6e4598dd475436799b8c43771c86ae5a8c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A7333EF0362-0001-1297-F293796E86FASessionApp.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF0362-0001-1297-F293796E86FASessionApp.cls_temp
        • Size 83B
        • SHA256 49e0f1b48127473d2b371d72aed5ed035faadc17c1922da44003ecb492b36562
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A7333EF0362-0001-1297-F293796E86FASessionDevice.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF0362-0001-1297-F293796E86FASessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512
        Submit Download

        6A7333EF0362-0001-1297-F293796E86FASessionOS.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF0362-0001-1297-F293796E86FASessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 aff4a2586226b0c57fe68a4b13289ea9d099599820e3f07049835eeb1708d89c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A7333EF0362-0001-1297-F293796E86FA.temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A7333EF0362-0001-1297-F293796E86FA.temp
        • Size 352B
        • SHA256 25a5c3aac72b8aa81b9852a9de678f5678bce078b4fcb86f44766f185f9de747
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A7333EF0362-0001-1297-F293796E86FA.temp.tmp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A7333EF0362-0001-1297-F293796E86FA.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A7333EF036200011297F293796E86FA/report
        • Size 765B
        • SHA256 ab3811b640e205deefde79a896c8641ca386d06e901a0e09ecef8cf028621c3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5374063370416783553tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation5374063370416783553tmp
        • Size 90B
        • SHA256 b8613dbb2da09b3e0e41b56547117bfa9927c69ffb7b1775a9f84bd11b39065d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5599452609257062252tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation5599452609257062252tmp
        • Size 561B
        • SHA256 c6f7c89f8eb894e4fbddb92b5234acbd7e4342b98f4ae7b9891e3f5d84e4f603
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_deps
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_deps
        • Size 408B
        • SHA256 06116eb0a80353f9b20cb75cdc7c55660e562faf0c9eb048f15936f61903888f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_manifest
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 4f60c72b3d283b55e5bf97caa742a1c9ed4041ab70018c400eaa31810f4a7669
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 24b17c5b051629ea031cb2b897ac9888c98844d8a7c11537561e84234b87f70d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 060a1cd7d5ea8b6e9c3d15855ade6c60865bcb574d14d9118d4bb9b27a10b606
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download