eb610351e70a1c564daeb44463089739f700eb5eb4048f705cd05601e6989d9d

Analysis

max time kernel
3832961s
max time network
154s
platform
android_x64
resource
android-x64-20231023.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
submitted
18/11/2023, 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eb610351e70a1c564daeb44463089739f700eb5eb4048f705cd05601e6989d9d.apk
Size

4.5MB
MD5

fb83fdab94d74ac574f8e893e3d58a38
SHA1

27a581e93776a7cd88a7aae3ff72966c07bc8f6e
SHA256

eb610351e70a1c564daeb44463089739f700eb5eb4048f705cd05601e6989d9d
SHA512

8a947efe958ec2c312078913c1d5a7ef9a4cafea57b0fcf26217ebb77fd407d76a5dd4c2ebc97b20bdb12a44d0de53911ff4028e8301174643d341f84a4d3402
SSDEEP

98304:6uyD7istic1AAUl4v4g/FmCLOoHq5cyOLigoTYryw7B:6u6Bi07/F45cyOr7B

Score

7^/10

infostealer

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs

infostealer

description	ioc	Process
URI accessed for read	content://sms/inbox	com.WSCube.ControlPanel

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
10	api.ipify.org
11	api.ipify.org

com.WSCube.ControlPanel
1⤵
- Reads the content of SMS inbox messages.
PID:5129

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.WSCube.ControlPanel/files/profileInstalled

Filesize
24B

MD5
d3a5490fd7a87b7be0c2e5da58cfb12a

SHA1
fed628191b456b9a8b5c4ebe7222fca20346976c

SHA256
c189795117d9ecb6938ff494d370b05b12b0657b86a9c3a3f9bedd5030cf34d6

SHA512
34607edadf5d7a792e019547a8dee6f85eb816d2f0ba67050193ce8a82aefb9921397349b20ddcba1f8891e1574e8b4eb29ff0e1542e4f5ffaa71d357e0d0cc1

Download Submit
/data/data/com.WSCube.ControlPanel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
dfe9e1a1d9ae0923da06dce982edbbf4

SHA1
1d7b925f8b64b0b812a80b250652492bbbe477a9

SHA256
50faec0a6e71b266b1f57985b7506de0621f044393fc072dff4a85e348278df7

SHA512
597d271f0e2e9fbb1cdea4a531a4d1055dd4e6e489d8bec210be6af093f7952b368a2c6029ed88a3620c5abf8cd0b27506a426ac1f9cbdb0ec06fc46db77605d

Download Submit
/data/misc/profiles/cur/0/com.WSCube.ControlPanel/primary.prof

Filesize
1KB

MD5
3ccda8b4a53699922a0b131241b308c5

SHA1
16c8d3f2d539a0af446aff84f6ed8c9d6d879f4b

SHA256
ef011dc8410919e7c90535da64d8a90f45ddf4ff5e831b89ce72e5b0537fad4f

SHA512
e087af60034f731d59d2ba9158de255401c4deb14bb4684f0a6194bfd5761e13112d66a676d5ed4a939d7df30c25e75fde0db98eaa8905c46a646630441b7819

Download Submit
/data/misc/profiles/cur/0/com.WSCube.ControlPanel/primary.prof

Filesize
4KB

MD5
14753e97ed772e0c8fbda16acac191a3

SHA1
cf5908049369dd52d65f368ca64d924f0a90ef7a

SHA256
7bd1128e266f95037b58183a15271622da46526da9b81c762e297747a5abdc70

SHA512
eec598b1e1ddf36ac160d3d5edc8ceb7a5013e1c49d848867b60755ef559637ec4a7c70b8fe364c22d48ac090ea8379228a55be993e65ff981c81ac7892cbec8

Download Submit