Overview

overview

8

Static

static

6

IPVanish-M...om.apk

android-10-x64

8

IPVanish-M...om.apk

android-11-x64

8

IPVanish-M...om.apk

android-13-x64

8

IPVanish-M...om.apk

android-14-x64

8

IPVanish-M...om.apk

android-15-x64

8

IPVanish-M...om.apk

android-9-x86

8

Analysis

  • max time kernel
    846s
  • max time network
    749s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    02/08/2026, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IPVanish-Mod-v4.0.0.8.139194-MOD-gamekillerapp.com.apk
  • Size 30.6MB
  • Sample260802-vm651atta1
  • SHA256 9c1dc4093e0e4a050cb7dcfb692f440d3973ff7812a8f61d74b3360eb012c762
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

Processes

  • com.ixolit.ipvanish
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4095

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_media_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_response_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 9a727c478558b1386fe4f6d33f18c300a5de8f6af413a99a11606318ff67b28b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 6b14a7991fe9884efb7abcca93cfb7c6e1d2fc5a514b34bf08734137e3f23b1c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 55cecf7058da3f1274c72892b0be7e2de08e04f7adc888953f0cabba272afcbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4f9aaaf7c62d64b08331e94cc31e5800e3e2224e6818994e2fd8892beeac73a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6e11eb4707aae0eda546c36bc75bd8a607a3d632015258ec5a5ee42826d3d509
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4a6c6a4b248e46c6014437124a9c48e456794226713539565ad25704465cc4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 417d7d6471522ac1326739aa53e1953c15392b6484cd52d70e795cfb8e434747
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b23eb66f23f69e1066a48bd8abd5b631a7c054c2c7ea0b376d75435c690ea043
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ac0de90a48b2f52638490f7c3f968f60c94fd38296e5976fe23dea44d2c0a9d2
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 082d4cb19633cef604b203bbde6e9f1a8456615bb57f183a99df7e64118994cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 23db5394d3039ede3f4781e789dfd7e69a001ffb89d52e47a79017d2a49edf23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7f0d15e41564782efd92262c4e4dc8a59e469045d16d18f068c89616588e65c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6cae00ee495858dfa50e44ff31892f45240e6fbf8d59893b86d5e1dbf72b8f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 81c0429f6ab3ac6cc995f6617666b315431c285be1554285f135fc55dda7ee39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A73362C0383-0001-0FFF-D3ED5F2D2FADBeginSession.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A73362C0383-0001-0FFF-D3ED5F2D2FADBeginSession.cls_temp
        • Size 75B
        • SHA256 af176c624ee515d04838ef40685448cbac30438c8bf0adc3c36326a03946bfcf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionApp.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionApp.cls_temp
        • Size 83B
        • SHA256 9054d5bc38189346a1faf62a5e91fdbed4fb44cbb06948e22e58284b8c53bad0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionDevice.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionDevice.cls_temp
        • Size 49B
        • SHA256 4394de237aac50bbc0172728f1298edae4a0062f0a1f82b6383929a5c8612840
        • MD5 SHA1 SHA512
        Submit Download

        6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionOS.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A73362C0383-0001-0FFF-D3ED5F2D2FADSessionOS.cls_temp
        • Size 15B
        • SHA256 b7869422f5dcf3f24ae91560cec05ebb39852ed45baf3a31176f9b90de87aafe
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 e02fb5a9c8672d739294eff9122540c71c35d4ded53a87feea1960ca79711f99
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A73362C0383-0001-0FFF-D3ED5F2D2FAD.temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A73362C0383-0001-0FFF-D3ED5F2D2FAD.temp
        • Size 349B
        • SHA256 4c6c92f091fe1d40a9012023ce49b7f450d127faed2a8c99641f40efd013f9ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A73362C0383-0001-0FFF-D3ED5F2D2FAD.temp.tmp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A73362C0383-0001-0FFF-D3ED5F2D2FAD.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A73362C038300010FFFD3ED5F2D2FAD/report
        • Size 765B
        • SHA256 190c8a0dcd79de8acc57a21af29694cd2446fda038eb40cc5ed863c8a34bc505
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation2320882057747145135tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation2320882057747145135tmp
        • Size 90B
        • SHA256 8e341e23775acc3cc940b05636be07f5e0ff7f86845cebe3faf2c67cc7f4c4d1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7952653149415991056tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation7952653149415991056tmp
        • Size 560B
        • SHA256 844624d3d73fb7d1cbb0ee4ec54fee0d18f75b128c2fa45af882076b2e59495b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_deps
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_deps
        • Size 408B
        • SHA256 b2bcd27f23ffceb1765f5b08ceb951cb6f3cba60e1a89c4d8a6bfb44f7337b0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_manifest
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 4bd61df2efe3b42be503174e90c620f5165acfe5e3347fc43bc241154d9997ca
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 99efc7ff8d973fe896050d944c892c778643eebd710aa360d33c9fa68dcc8ddc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 a8e1c893867c6803f1a025158bcebe5405157224703509a56ace06606b5ab2b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download