Overview

overview

8

Static

static

6

IPVanish-M...om.apk

android-10-x64

8

IPVanish-M...om.apk

android-11-x64

8

IPVanish-M...om.apk

android-13-x64

8

IPVanish-M...om.apk

android-14-x64

8

IPVanish-M...om.apk

android-15-x64

8

IPVanish-M...om.apk

android-9-x86

8

Analysis

  • max time kernel
    830s
  • max time network
    782s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    02/08/2026, 17:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IPVanish-Mod-v4.0.0.8.139194-MOD-gamekillerapp.com.apk
  • Size 30.6MB
  • Sample260802-vm651atta1
  • SHA256 9c1dc4093e0e4a050cb7dcfb692f440d3973ff7812a8f61d74b3360eb012c762
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

Processes

  • com.ixolit.ipvanish
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4294

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_media_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.ixolit.ipvanish/cache/zendesk/zendesk_response_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 891fa4bc394e29e1096392e66db1f56bd3579119a850c2810071025c229e0f7b
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/com.ixolit.ipvanish/databases/com.google.android.datatransport.events-wal
        • Size 52KB
        • SHA256 23333350ec12797202035b446f17d28abc7f1391a812ed54178f679c35334d85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6d91819a1bf26a61f612c37c21b2a07c924f75a168369803e5c9dbeea426a73c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 deebc5cede9f9a5f02313b8ce3c53a192b1d6b369a6a18479af0dfc8411aafcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ffb1733598912a16fcf719a697889355d468be5ba59ce98b705af1f25a4fdd36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7920b8cb63bbc8f07c20b5f4cd0d20aa7a5661a4f81f96d9e88da897374bfc3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b03fa6cd71d41e2fafe8125ed6849cc30caab3b7b20531b906dd74aa3f236d7f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 0775d1ddcd31cbde12358f4d54691240d707a927306f951497a5b981c31facb3
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 6f61f32ad6f0d21497ff0636145a0998988b73cfe04768ea105c7331428132f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 41e825624595e7b35aa339287caefd86cf498a7df094801b24a638ae68228189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 a35282ce9ab489dfe84842b17389bbc764df7f78e4f2401b5500e3428fe1ed66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 cbd12159ad5e77c77c6a62ca5f617ac8e32747b6533103a6ed8db77a1896f678
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 2621a34cacafcbc4d99cd4be9fe2bbb4e192b0ac14cbf2305deb6b3a1799f955
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.ixolit.ipvanish/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 df366f5ea67b6dfed2460f5082db6c1e82d8b7126a9f2a28dd055a119f504c98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A733406035F-0001-10C6-99F7C7AB832EBeginSession.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733406035F-0001-10C6-99F7C7AB832EBeginSession.cls_temp
        • Size 75B
        • SHA256 b094e856272523321da5ba916d4585f766e5871badfe70fb1ddf49ebf492931d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A733406035F-0001-10C6-99F7C7AB832ESessionApp.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733406035F-0001-10C6-99F7C7AB832ESessionApp.cls_temp
        • Size 83B
        • SHA256 7a7cd8afd78e8054f46d7867872375c8b790ac1ed94cdd4a435e3cdbb0de4037
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A733406035F-0001-10C6-99F7C7AB832ESessionDevice.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733406035F-0001-10C6-99F7C7AB832ESessionDevice.cls_temp
        • Size 49B
        • SHA256 5d3c502e15742b8888ce69240ebf20524db18b9928fa11e7da2f02ec82d69afd
        • MD5 SHA1 SHA512
        Submit Download

        6A733406035F-0001-10C6-99F7C7AB832ESessionOS.cls_temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/6A733406035F-0001-10C6-99F7C7AB832ESessionOS.cls_temp
        • Size 14B
        • SHA256 5fca2279d938d085574c4410592f103674e20245be6bcf4b2637405cea10ec03
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 938aab42e866d3f48de73a2667cc455ce5531eeb791110a67602ba9cd6171775
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A733406035F-0001-10C6-99F7C7AB832E.temp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A733406035F-0001-10C6-99F7C7AB832E.temp
        • Size 352B
        • SHA256 32008b66be5f9db4576c56e9c02417a84052acd0267a97dfd1000bf00367451c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A733406035F-0001-10C6-99F7C7AB832E.temp.tmp
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A733406035F-0001-10C6-99F7C7AB832E.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ixolit.ipvanish/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A733406035F000110C699F7C7AB832E/report
        • Size 764B
        • SHA256 63176e139689523ebac6768b87904bb3f3c6b8c227e68fa81a8e31cb33a66862
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6680108682327862406tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation6680108682327862406tmp
        • Size 558B
        • SHA256 6f918e0be96ac03c9d0cef2b51fa45349d9d258a10165ec44de0045f90ea4b5a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6842158066540716001tmp
        • Path /data/data/com.ixolit.ipvanish/files/PersistedInstallation6842158066540716001tmp
        • Size 90B
        • SHA256 5b7264808f729c10dcde1c384e3df42e0cc93c81ba9346cd8dd3a7a163dfcf83
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_deps
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_deps
        • Size 292B
        • SHA256 2d5d479a4e2b72e30e8b1487878c8a177c05170a98ce565d6fb95e40318c6c98
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dso_manifest
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512
        Submit Download

        dso_state
        • Path /data/data/com.ixolit.ipvanish/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 77ba60be9b950a75f0c0b95fd3ee75536efeafb1a63a916b2850e17f320cf83b
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e37a163bd9ea102c8de78eeff8e8828ef6e17bc020d52a0edcfcdbf8242d6af1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ixolit.ipvanish/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 25829e90f06744fa9ffc8423fed9c7d840eb09f49f4048b4ac8d21923487d4c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download