Analysis

  • max time kernel
    190569s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    11/05/2023, 14:35

General

  • Target

    Secret SMS Replicator.apk

  • Size

    62KB

  • MD5

    615fe78f3a644cb63df8b7918fb8d503

  • SHA1

    005d5f6e94321de473d62706a94fbecf67c9f5f3

  • SHA256

    5e29d42f94ef0332223f4e7d149bc6f6f954114d8220edfd88200c4731a0b868

  • SHA512

    c1d3bd6d6dc23630ad05a6069a13783896044976c2989804e762adcb1a39dba21b82fa0020d2bcef9bbd600677ec44453f506157b6c426bfa6545f1d3a1d8327

  • SSDEEP

    1536:WidikQPgI0VLzFlWS8Er/FrKJabgURX1gy+18objnlUYtrm:WDFgI4HN8EUIUW1dufeY1m

Score
1/10

Malware Config

Signatures

Processes

  • com.dlp.SMSReplicatorSecret
    1⤵
      PID:4090

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.dlp.SMSReplicatorSecret/databases/shady.db

      Filesize

      24KB

      MD5

      1e8b709373d545cb8fd5e3108bedbbc5

      SHA1

      c8c1e854adc5b399ef8ecbfa54cf34904c21904e

      SHA256

      66a33a222480cc8f18c2b61c546915c973610dc5dbf07317693f41379849111b

      SHA512

      b767875f537c7d93394eb61666cfea11ea345ee5c5dedc890fcbcbc809ce37c96fcd59140673d1b982b103567cadcfed8d4cfd79dbbfe727d3196de5e584bd6f

    • /data/user/0/com.dlp.SMSReplicatorSecret/databases/shady.db-journal

      Filesize

      524B

      MD5

      78aba24ba4efcd4b4e7d1e36241dfdd8

      SHA1

      827a4f837942794413c90c2949ecb1fe7c8c9d96

      SHA256

      e61d1395a315a3a71b9de2e6ef67c60d42b4874089c3bbdd00e028304afa863b

      SHA512

      1c0f30ebb5c3dd88d9dc1ba20f36c313c4bf9bfdd6a6dae393d620128fb8218981eaa513515324c89f4c46b1b0674531975c080139577dac0a976676788fb666

    • /data/user/0/com.dlp.SMSReplicatorSecret/databases/shady.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.dlp.SMSReplicatorSecret/databases/shady.db-wal

      Filesize

      32KB

      MD5

      980f63ff165aa8a9290d51b0960890bf

      SHA1

      d1eda904aa23f341800187de2cc49b060c06af06

      SHA256

      c0b4455f2a005c6ac0b4ab05f7e0fb5bc6225c261f74b6b910bf325c99d88cf6

      SHA512

      8f0d5b48da6b36f6319355568c5f41e5c6c92d5054a57e5b57d83b437077e9711fa8d5dd9f411dc333daa086ed383260e51703f4fd0387795ab47228e7f4118e