849fe2c530dcc6e996f4d812073f38c5582d18dd5ff1bfe6e21e918041c78844

Analysis

max time kernel
2356540s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20/12/2023, 04:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

PandaHome2.apk
Size

7.7MB
MD5

025b3383ba21ea4e7180aec9addd0f36
SHA1

7645b744d751a1827db9963dbbddb621ddd6a02b
SHA256

ccc473114bd6f70c82e5222ec4c224bac1ea78497ef8c501d3cf1a0f39bcd719
SHA512

a926f53a0b7170e67ced105bf0e5a65f09ab94d7740fee47e34dc425584c8d8843f4963afc6f7ce2659d4b8c55e7bb06f15c0419f47edf9fcab1cb70e95d0647
SSDEEP

196608:D+QZHILBmi1O8Xl7yIPmv8841o1zBkH25/IE7cmR:SQZg1V7y4mD41o1N3I4cQ

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs

infostealer

description	ioc	Process
URI accessed for read	content://sms/inbox	com.nd.android.pandahome2

Changes the wallpaper (common with ransomware activity). 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.nd.android.pandahome2

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.nd.android.pandahome2

com.nd.android.pandahome2
1⤵
- Reads the content of SMS inbox messages.
- Changes the wallpaper (common with ransomware activity).
- Uses Crypto APIs (Might try to encrypt user data)
PID:5082

com.nd.android.pandahome2:pandahome_softmgr_process
1⤵
PID:5477

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.nd.android.pandahome2/databases/91analytics_0515.db-journal

Filesize
512B

MD5
53bb02bbb507fe5faea0b7575d44090e

SHA1
4185805b2550cd2794ce83b9fbaa3da19ec82865

SHA256
886a03f67a6cc25f22e460952c9885659f422609a3d45aad225dc697b63edbf5

SHA512
a65a8b6fa86687ebf2b7e6711cb5b0b63ba5b784e2a147fbb70481678e8e869f25a78f5958a27907b3d006dcfb8d8c2b351a1303f25dff5edca3bfcdd3988b05

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_0515.db-journal

Filesize
8KB

MD5
0eb4feccf43097ef53b5c6f3c3f86d91

SHA1
400ef013c3c209a77aa333a9025deb06bb7dd126

SHA256
72345ec23edf57a0a2faff4af3761c6f170ff76b92f9c7ca333e2ab4c56d1b46

SHA512
f10cab5528a6a8558798c98d1cedf1cbf5981352e24f7550cf41fe6cb0809effd489da6864b9ca5150255c57ebc3998540ee7d96867b3a56687c2b42429e43c6

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_0515.db-journal

Filesize
8KB

MD5
5b0dd14d79c7969fbc96b0bf022380d5

SHA1
88fd252c43eb28f9bca50cdcad4c13e3ff2207b4

SHA256
aa13f77f1c63685505714c651664c23da387afdb842231f3fffa40cfb6eda363

SHA512
4d21520491d351717ad4bcb24c88417fd7a1d1a49cb5df1537b1cbfd30f398bcdfed1138a23ef02d02813a02e9a70354eb058eeaff18b444de60e7e6e575f18e

Download Submit
/data/data/com.nd.android.pandahome2/databases/data.db

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/com.nd.android.pandahome2/databases/data.db

Filesize
60KB

MD5
085dec5f6b7edb3e3fb67ad2d7f919a0

SHA1
d0981a124e9cee4507f941556c728041a134bed5

SHA256
0329c17e64c61972409c68b0cbddc36bd94047cc19d7bce2e03cc4afa6dce2cf

SHA512
360040133adb1a430c4ea1b005f53e79329b65542563a081b9d97d6526c5d6009667125b881668dd7741d0b64a2733b1ff9f1364ae140160e19d3ff3c6b89553

Download Submit
/data/data/com.nd.android.pandahome2/databases/data.db-journal

Filesize
512B

MD5
6b7fd5daeed7f829568176eedf90f928

SHA1
91a298d691bf85f961683e9d7b58c66a0ea58bf0

SHA256
9f1ea32c4bfd03cca6d1c8620004028b70a240b02d73104edf05bb4b4afdf6f1

SHA512
3b708efff1e69633245686fd21c969b3c08ee288fff500416fa089b44cb6a25dbb1840de330dc4e603d7aaf162c00955d3c35e196a78f75980f42d05e2857484

Download Submit
/data/data/com.nd.android.pandahome2/databases/data.db-journal

Filesize
8KB

MD5
c044b55a164f6ae6ef1134c4315bb36b

SHA1
4cbdd63dc129e2a8f38521857dbbdd12dfbb044e

SHA256
e5b2b266a10d6ad8d203559d6b05e55c037e91bc6f621cbc83503cd43e91d09f

SHA512
dc74f3759fe35cda5971e19d5ae041d30feaca4dfd2623abf45314aa8735925d3e3a72931f6040fa28260b88aaa195cfb209e1549bff01c743fda6ccf9ffa9a6

Download Submit
/data/data/com.nd.android.pandahome2/databases/data.db-journal

Filesize
8KB

MD5
861b991e965c2f2759939acf7cc23dac

SHA1
378e673846d2072d8c117d9de065ab9ed4b7c009

SHA256
bd7cd500b9b315ee1b5ae488099f81f2172d7001e5c91260452f1277321d5df2

SHA512
64b674af5b279899e3142f2086a3dc47b0b7502fe047cccb8bbfa40598554d6fb8cc1847541cb1fae34692258e1f756f3607d74395360ff7186b7ccbd555eae2

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db

Filesize
20KB

MD5
303be25da858698b5431d0f23f325f97

SHA1
412ebbe9aaa04e67967b84e6762f65b0a759e6ca

SHA256
ee3cae80f52520ddadaf1f29bf6c4e0c0a157a3c8170aa3385465e307dd441ae

SHA512
5045c03cd4ad2ec27c9675409554b495f06665814495c7a0769913c1f9883be11036c43389bcc14b274c9b1e77435b744c92813936530f0ef42f89d6729b1577

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
512B

MD5
407c6dbf83e2f4666d5c0624d2a3cb9b

SHA1
fb03fd03873ebe9446272fc96204bab8332d472e

SHA256
66a4aae8d189f025a9faeb1b5ddaca6d27971c57634d49a57af79b95c3da1a1f

SHA512
d3c11ee262e7e0bc5c8548667ede97136dbddc777222e42788a4b2e94fdbc46e41e438389d276396ed986facff3ca308feac1bfdd06d6e969a7ab930c47c2a23

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
8KB

MD5
674f5ffd7e91a044f20ac9956480e352

SHA1
0f8ada09d86e20dc69d19ecfb8191996e5a0ebc7

SHA256
470800d685d29020ebaf7c2cc9ff40ccee7f3d0ba34cc9e31050c0495acc5e58

SHA512
d5e7293ed616c57ed9e34cf692b38d7e0bc4f26130e4c531e0748911c6906dc020ad08873d4a100f77e5ed97b5efa84b383a4f7faad4517ee63bf3e05b00b212

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
8KB

MD5
4f0ceb7490ae25abfc43659bf564d73b

SHA1
39337b5f6bedf91a539ee94af5c2c4c5d66e1e56

SHA256
ed2987299fa8953fd8dfa63e59fd54cdc40c518d5b69f7e4517e4151d57b4abc

SHA512
48de3140f0bbf4937eeaf61474409284a7923e04878cdf326a5d2fcb91a4e0fdc4c754c6ac8a525b77a7003062a41593a3a2c4cba5985a57ad84a8a8dc09a9cf

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
8KB

MD5
d4ec725ccc41167128d172945b94f04c

SHA1
60facf29fe2b5b2c1938adb3fd17b464fd50ec7b

SHA256
0cd5a0e2f00a07e03c9c50c1aad8aa2488217020558ef0687fde4ed5db57c1b1

SHA512
03d4119126ed1bfe3eb0bc8f3c0d95095f10e5b85669a7042ffa725428b2c6c757decc2a467268172d975e92096ac3a5356563c27c2cd481f901137a5ce90d44

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
8KB

MD5
c479ffdb8c573934aa92cc27c30fe1e2

SHA1
c0b02832df14281350369759292a0a65f0a9fcf1

SHA256
50cce249b55c8201a2e529927ff9c0372e1c61587a196994e418a57d2c64e675

SHA512
fc0dd9235e90b404f066cd97d55102ff4decd835e4a5d526d83528392470029720c959b95c6f69ee012c20c9c0dc4bc7f9883714824251693419e8da63891d4f

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
8KB

MD5
d6b6e7e4e42779aa4766154133ec77ec

SHA1
abb7d30d908bdfc835aa61febabed18ef4398b0b

SHA256
9ac52f3bda1aebcdbb444d6a6d9a6c3cc17ed5d97cf370b439a0e084e2ed78bf

SHA512
b88901d65354dfaf4ee869e8b5a76799cd129261052ae46791177296bedda908e78853ae6889e095d016255b6752fbab7659fcabe5c742315b7fc48aa2973b62

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
512B

MD5
32f2a1903f81d58f415f3d868470cd20

SHA1
16bde9fc22aaac187b2c0e9a549ddcd55c993d82

SHA256
69f9a4e7d3ab34764ab76ff4656f1fb7a7edaa0cf042bd238a466a4920e0f618

SHA512
55caa6f1e7de8e977435341e8b6d6ef31932ef6168fdd223255d2ec590447f7a987de037ddf6d11d01d39ac340dcaee4c70775d8339f623833d3cc30b84cf75f

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
8KB

MD5
274f82bc62f9ce01e2987ea1e5d55a55

SHA1
27a6849299fad7056b6e1240563c3e1f43eeab39

SHA256
065d5af96d9fa59324789185b2f3da4193b80323f5933740591ab842230b79ad

SHA512
f42247b8d542574f1ddc29b9c5ffd3a610f8b69630d2dae0b0cd05822bbbbd1da28ce68974221e0223f20936950c491c2aee5f24324f8f71f5557ed61547babd

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
8KB

MD5
558c132b7f6d00b7cd89a0f15941999d

SHA1
505ffb05e644a2978d4acd7641df1aa28d62aea7

SHA256
925f4b4737e593d00790573d63bfc200f5bfff3542d82213901060c57e093f8e

SHA512
beabd86796eed0a4a8dc85ee9a61641875188ed604f5bb4bcd5bca89a7e3a0dfde8693d2822fd0e9b9bdd58bb1e5dad49bc083578c074ef881f4f36cc3e1fcef

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
8KB

MD5
1f900d3d38c0ceb28c4912f91b8ba0ac

SHA1
2885c81054c0ffa579dbe5276387b4aa97f23cba

SHA256
e44aa32a35f1ab812ee493d60f7a84fa61a04ad81113a0f6a0ad6108fc8ec3fe

SHA512
d5c483ab1c53427a54d5c70aa4727eb47c8f4a2a49a86e6a870aae7ac5de747e723bbb6f8bf037901559dc5b42cf38d9e6efa33a7d82df3720dafeb81ea94ea0

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
8KB

MD5
010b9db35a4c855ed3df26a07ed478b1

SHA1
15a64bdcd34bef28f5d8a23500f09c5c74538ad9

SHA256
add54273ae79f179055ab901eaf10fc4d026a060d084c1f284c891cf44012496

SHA512
5365119edb31f8086f96baad0517c3f20858998c19f9d86fff4eca9b3ada706b95f2906d8d79f3380f52680d3ff00e201b7aec3d8d2edd2fddf65953b92406d7

Download Submit
/data/data/com.nd.android.pandahome2/databases/docbar.db-journal

Filesize
8KB

MD5
8c211441966ea54e59b880188b9ad4a1

SHA1
f4444c4d09f2338c4965e20cbb9aace942ffcae8

SHA256
14cc863cb16f383b877a73c1027b2af9bbf278d901ad0fbdcb8f72b2191b3493

SHA512
44731f07163c261b3c502d70d48543983e1ab0e9ba45a979c2f4a69aa4c4f551fe6e05dc917e059146483da49bc95a515c3ed116492f0175a5125c86a4449b44

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db

Filesize
12KB

MD5
163b0e3f017becbc89b9d7f330b78f09

SHA1
1ef9cd8ac8655190468d0ccece0a4738634ab0f9

SHA256
cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

SHA512
6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db-journal

Filesize
512B

MD5
127a9b99622244ed24941382cef3accc

SHA1
90da70d8e5f4fea60e0f95397c9fc656f08bdfcd

SHA256
4bd5e952e1dda1fd84831dfbbcccab29c53c2dd790a8df5cc73d0393a5411e2c

SHA512
345a14396c1e1e0241aaea771b403b03819af2e5305c92883829f5135affa4b77212edddd9df00fc53a1d6809957d62b0b5a80084a768be6849cca0ab80bd916

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db-journal

Filesize
8KB

MD5
715e5931ffa30802e99421c18682fa2b

SHA1
5b138163f653adfef9d47bbb2af445f5c5e5e10d

SHA256
70a941ca318ef77d00cf1e5e5388b08ea701a7458129f9537524fdd4fb7cc35c

SHA512
952aa762452c49058eb997cf2319463cea0bc8f7c4edc46677a50e369c1e2bcd8adc76c7de13ded1d15563431f147b8e92c71859ff66c8413d83942110ec3748

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db-journal

Filesize
512B

MD5
b05d821e1b8c157bf8ec4fcd014cfda9

SHA1
279ca9b0cee26ee2ba0781359f3aa9dc7db881d6

SHA256
fc1dc6ab55d9f83b3640a5cc0ec015ec1cfd411e7776788bd31980d7a1ded689

SHA512
4df3c8159defc7c95df8fcacdf45442cce1830cbee5cbd5de2840a9d14ce3bee9748c3d05a4934406f4d94923789878a5793b2c1f9ff076c755c629d158fc718

Download Submit
/data/data/com.nd.android.pandahome2/files/launcher.preferences

Filesize
15B

MD5
8045cecd3d5a4c893e3a75d47b17121e

SHA1
61f08d6c53ae857cfd4be1bf607a6c80e5e78b23

SHA256
9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3

SHA512
70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads