Overview

overview

8

Static

static

6

IPVanish-M...om.apk

android-10-x64

8

IPVanish-M...om.apk

android-11-x64

8

IPVanish-M...om.apk

android-13-x64

8

IPVanish-M...om.apk

android-14-x64

8

IPVanish-M...om.apk

android-15-x64

8

IPVanish-M...om.apk

android-9-x86

8

Analysis

  • max time kernel
    775s
  • max time network
    900s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    02/08/2026, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IPVanish-Mod-v4.0.0.8.139194-MOD-gamekillerapp.com.apk
  • Size 30.6MB
  • Sample260802-vm651atta1
  • SHA256 9c1dc4093e0e4a050cb7dcfb692f440d3973ff7812a8f61d74b3360eb012c762
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

Processes

  • com.ixolit.ipvanish
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:3226

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3226.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/oat_primary/x86_64/base.3226.tmp
        • Size 754KB
        • SHA256 9612ffd9c7f22b14d8188b5fb61cff017cef690efb21c55722ad1cced28d736b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_media_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_response_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 3500e44e2d483dd3e6331d2af5bc8ae15861caf79b845d0b07c8f6ebaaa0bce8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3d797213b92ee8136fede3c9df8aeb7bc83887a05af350bff536226386e0feb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 60cc290b7440d8d1ac79fbdc804546e5e1a4f08cf3e1b717fede7f1d47cd6ab4
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 895a3fcc64bb8c6a5c919dbdc7b60c086df2ac1c00a16b7ade315b264d1f1869
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 930d9f77e4446792baeb19600a918f1a0745e4822dcdb61165fe405cd2d521c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9aa29639d3dcd88b200fcf98257d871f354f194f65cb504ae8fb68811f6a0bb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 540dd6fbf36d6fa6643e83dce1bd2a4595682cab663e613de28abf19248f3ead
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 27aa31c94275a27250296182a01b04bdccaa452a0b4356121e30af39abe409d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 322c0ae6c1a911ec7abe2a1b898b2bd4c924dbc467b1fd3a97f2f1d8853e1acd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8da5bd33c2ac70889e4695b21a4afef2ec489660dc13d4f535c5862863c5cc45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 9398b5e4b9f48cbbab69582342f98711366cd5ec6217408c25aee6210959b2c0
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d632ca6bf40ee15d1d0420dde6d8836f269d141ce39268f5533a2ddca407b3ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e899b14a777f798c27df24c33572a86a2b88ae494f248554896cd54703f9b5ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ccc0de64e6d5c333def91e8c20a599fb7dcad176e4c19a841690288854c3dc7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2b48eddaa2876c1cb7635abe4195db929512dd4ecb1c732e7e1908e0ad038ec1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2624117b21184491078e78c65591e83d95495da8aa586771737d8c196a117d98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A733BE00296-0001-0C9A-ACB69DF9EB0EBeginSession.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733BE00296-0001-0C9A-ACB69DF9EB0EBeginSession.cls_temp
        • Size 75B
        • SHA256 b2ae4242566774d19da5dd66dbf192f1cb99b63cf209f046f66c012d5396823a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionApp.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionApp.cls_temp
        • Size 83B
        • SHA256 a425b78637b524d202d60fd2ad0c8521f8f6aad21beb0dc54e0b6b47f06c6abc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionDevice.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionDevice.cls_temp
        • Size 49B
        • SHA256 d71997b1c0c2755aa38b1305e49728b3854fd38f948a5f5cc5f90f55e874727c
        • MD5 SHA1 SHA512
        Submit Download

        6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionOS.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733BE00296-0001-0C9A-ACB69DF9EB0ESessionOS.cls_temp
        • Size 15B
        • SHA256 8f8805011937c2f14642ef673ff0f8605adebabe6350a7718a3bcaf497e804dd
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 f19db2d7dda18a8d7391c116bf3938a45055a5095a75532ed2de75f6701f182b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A733BE00296-0001-0C9A-ACB69DF9EB0E.temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A733BE00296-0001-0C9A-ACB69DF9EB0E.temp
        • Size 421B
        • SHA256 640af4bf1f0c7d60275a37c73feddc5bb0993d133a8d7044d8eaae37ab033ba7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A733BE00296-0001-0C9A-ACB69DF9EB0E.temp.tmp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A733BE00296-0001-0C9A-ACB69DF9EB0E.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A733BE0029600010C9AACB69DF9EB0E/report
        • Size 765B
        • SHA256 8e3a8392b421002393cd91d368fb7126537b80d090ab475ec6652ccbe3246469
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation1041395718122212910tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation1041395718122212910tmp
        • Size 562B
        • SHA256 a761ce5d52d6c7dd2cdb6642086b51d222ca43688eaa6892cc02363afa876d3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3252659579836458548tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation3252659579836458548tmp
        • Size 90B
        • SHA256 d4e74736418f6e11f3a42523d293f5eb4ba63270f209cffeec7c5c5df6ea7a0a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_deps
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_deps
        • Size 408B
        • SHA256 517c3dc480830ad22a3d8af42612f01448a0408da99da949ee8d4bd63dcdefff
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_manifest
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 3251dc77b109aad5c6e4fc2bc67bdd59d6066f703a2f8667a9d564b09e95e934
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e81e9c003d81811b1af16759a6a35b7d35017661510cbfd61838a9873b35a280
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 f677a00e6620901e97bd80edc9951cb13bc9bd23b9b61d61eb7d3ee6126205cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.0DikWI.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.0DikWI.tmp
        • Size 5KB
        • SHA256 46987230b4e15b406552d414fd4d6d6842acbd56814a7f202e00553b96e93c62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.AFl58q.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.AFl58q.tmp
        • Size 5KB
        • SHA256 40aba5d72fa988e7d7d011794125fd18598606047335a61a32a2ccf575772219
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.AOgBmu.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.AOgBmu.tmp
        • Size 5KB
        • SHA256 14cd8d24a3f5d7cae5f7d370a4a8afb679aa6f446698fbff3adfe32e8ca71f9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.CxRSS5.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.CxRSS5.tmp
        • Size 5KB
        • SHA256 5a33d6d34992f525f9a5707e53316152453bf284a2b845d13eb0dce05db4f8b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.M3EPoW.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.M3EPoW.tmp
        • Size 5KB
        • SHA256 4afcd62297c8fc95eef7089c420c5a6482f6132683d5a409a2dc14be76712502
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.MdHJGb.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.MdHJGb.tmp
        • Size 5KB
        • SHA256 f09b86c5055b87b7df0c8515435c415a059f079c81af02151d6b54c36c97e52c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.RKULnl.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.RKULnl.tmp
        • Size 5KB
        • SHA256 86b94e1046c6bc12218c12d501b05aba57a32dd74d3a5e9e1201566ef0c3f086
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.S3bEUa.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.S3bEUa.tmp
        • Size 5KB
        • SHA256 cf497f3dbda3b6320b8c79af5b8d4099b1ee7690ad90560dbb06765114de80ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.Y9nw3h.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.Y9nw3h.tmp
        • Size 5KB
        • SHA256 e63a9ba8501e6c7e1d63e5dd8334da2399585b1f11905d9e138105416ff3869f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.ZVvUAB.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.ZVvUAB.tmp
        • Size 5KB
        • SHA256 828bae3e1e96ee7cb0224d10e8b9088c153af72ad2dbb1a2bd16e8289f698b8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.diiSU1.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.diiSU1.tmp
        • Size 5KB
        • SHA256 d9edf1c6b3fd34e77e362bf1f10d65a4a895b845ebee8348eea8e4f40ad77d9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.sKXt0P.tmp
        • Path /data/misc/profiles/cur/0/com.ixolit.ipvanish/primary.prof.sKXt0P.tmp
        • Size 5KB
        • SHA256 938d6e16ce100624c7a0dbeba93fa86cee34b41a06080938444576db718fd163
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download