Overview

overview

8

Static

static

6

IPVanish-M...om.apk

android-10-x64

8

IPVanish-M...om.apk

android-11-x64

8

IPVanish-M...om.apk

android-13-x64

8

IPVanish-M...om.apk

android-14-x64

8

IPVanish-M...om.apk

android-15-x64

8

IPVanish-M...om.apk

android-9-x86

8

Analysis

  • max time kernel
    774s
  • max time network
    888s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    02/08/2026, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IPVanish-Mod-v4.0.0.8.139194-MOD-gamekillerapp.com.apk
  • Size 30.6MB
  • Sample260802-vm651atta1
  • SHA256 9c1dc4093e0e4a050cb7dcfb692f440d3973ff7812a8f61d74b3360eb012c762
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

Processes

  • com.ixolit.ipvanish
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4310

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.4310.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/oat_primary/x86_64/base.4310.tmp
        • Size 752KB
        • SHA256 b8af658830f2f8c79e56a631240d7bc62ac9b9f4519dfa74ec50b2e577e25551
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_media_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_response_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 89ce50778eb64e9bd28313b113fcca086ed3f52ec80c57afc05d7378c0708d3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b0472fad6a76e0db5572144267455e2c42b16bd57469b07704b2c9c061b39a13
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 01ef5788b388b529d94b67daa56d7632f48b7f038af434cb80108db57c81cac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 369cfbcb7942943ea9a53b6daa0b57189735c0423ad27608f4a7bc9b719ca829
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 59118f98382dc1f47d88c0d88cbc196ad8db63d0a63cbbc034b8496431b407b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 20a4208501fcfaee74a4162a0073f938e0d384f92fbc55d09cd77e196c96977c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dd6e65e4db5cf02d38f63de4c82411b714edc6f1299ff5c1f66eea431bed4afc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8bd1a640309cf4233004c45f29e9b648d53c2b2102e427ccbb23cb2e4355a5e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ad8b550cf4ae226b48bb097b39e7ceec184cc8571df84203ff9aa186203637d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2e525da606b5bb0dd24e1560ea0a1c5770c0ff58d3e7c4a9b3cd239ba6a33103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a8b576c0c7b35d1df083b53e4dae62e8558e821b266704e39e03739207e1db32
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d39462c21591ec1bad44651050fe7b3094d509facd4493672050b9dea92fee98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a861c1b0c97cb41120b9e1cb0590f05ce336e677302d092b2ab976fff198f318
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 586f6c0a8f7aab58a70c20b2a2df7fff2f20f7e70640fe1b16caf5df35e69609
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a0397246630465657eb5c4748fa3eeab234a7cf3980feb3777d24d45cf038b15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 579ca2c244fc0c19b3d0605515d6b4f10dfade0bd9d8530b517056b4d9fed48f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A7333EF02FA-0001-10D6-B97D906E4228BeginSession.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF02FA-0001-10D6-B97D906E4228BeginSession.cls_temp
        • Size 75B
        • SHA256 e75412a36cf11ea0d841c5c4451779af67d2a96163cf88ec847e6b4bb494db67
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A7333EF02FA-0001-10D6-B97D906E4228SessionApp.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF02FA-0001-10D6-B97D906E4228SessionApp.cls_temp
        • Size 83B
        • SHA256 94d375067b0cde8520bc88dc1dcf8e987019101940d1dff68bd7566e86c76a01
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A7333EF02FA-0001-10D6-B97D906E4228SessionDevice.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF02FA-0001-10D6-B97D906E4228SessionDevice.cls_temp
        • Size 49B
        • SHA256 4f1525f08ef4b55954565b12ea6e8daf351786c3c2f6e70eb4fe3db86cc943a3
        • MD5 SHA1 SHA512
        Submit Download

        6A7333EF02FA-0001-10D6-B97D906E4228SessionOS.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A7333EF02FA-0001-10D6-B97D906E4228SessionOS.cls_temp
        • Size 15B
        • SHA256 a0982ac8dd849679d9b73461a4253402b4716ab3206ca34144c8d2c89258192e
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 12f5195a740ed7990f636b17dc9343cfef51b24d83f1cbf605bbb133996def6f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A7333EF02FA-0001-10D6-B97D906E4228.temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A7333EF02FA-0001-10D6-B97D906E4228.temp
        • Size 349B
        • SHA256 d116849e5986fc231d8091a1d4f6a5ac916750a3d22c1ae8e2024af45597159c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A7333EF02FA-0001-10D6-B97D906E4228.temp.tmp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A7333EF02FA-0001-10D6-B97D906E4228.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A7333EF02FA000110D6B97D906E4228/report
        • Size 765B
        • SHA256 8f99d075fc67608a5526b9f2615086a64b9df3fb74a53b6a801daefde2941d24
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4267876393062130383tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation4267876393062130383tmp
        • Size 561B
        • SHA256 a5e56270a209a0bdba9a54486cb47be8c065a86c27bacb8f1b80758508fd6ef4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5511219541826075621tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation5511219541826075621tmp
        • Size 90B
        • SHA256 4879bef94c00503397cfb9d287bef28ad0d76bde0144f468091ba9fc3cf9d824
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_deps
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_deps
        • Size 408B
        • SHA256 ae6d4a4ff32e6b342a7172c964e6fbf28cc76fac9223ca1d7b12cd13f81eec17
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_manifest
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 23a9b8f169405ce14a1635c4eac45ff9ea2e5ccf23e8fc3e44d2e5b446b67e69
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 8fb591fcb1359764136fb3bb08faf762aa8721b611000ee6453eab14830b8ecd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 77b19dcab630a7ef1673f2ec9b758c6b76d178c425def648c8ac4f4fb184fa88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.bG7TgW.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.bG7TgW.tmp
        • Size 10KB
        • SHA256 03432c7942605fa53e5bfb707d8eaa76eb4c435c58abebd913eb752862a2c2a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.eH4WLE.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.eH4WLE.tmp
        • Size 10KB
        • SHA256 0d6ff2850bfb4200502054e8263294fdff26b23a9e18b5d1e688fcc28e58604f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download