Analysis

  • max time kernel
    2453653s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 09:18

General

  • Target

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7.apk

  • Size

    2.0MB

  • MD5

    dc9f73c8ec88a8b493a15a3cbcb36f15

  • SHA1

    29a918ace8255bb2da4c31d4781acdcfdbee2413

  • SHA256

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7

  • SHA512

    ae3f46396092bdfbfb9d6bb01ff96e5eaa6b19512caf0ea127750e8f629d5c8b6fe4840ff59abd83736af0182be6d4d704d9f62d60f365f0636c2e3192d3bb7f

  • SSDEEP

    49152:jrEZhWeMoyr3SCIVjZTqErr3I/UIFL4paQ0CryEcYWfcy71:6hWeLyrCCSZTq2YjFL4p5rzcYq1

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • ir.PluTus.pluto
    1⤵
    • Acquires the wake lock
    PID:5062

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ir.PluTus.pluto/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1836a23e92c00fbf34bfd5ba1240f3df

    SHA1

    7a919973d891263070921d436670ad8a5e60569d

    SHA256

    5f3fb019c3cc90aa5137d989df19b718e7319322ccae3f75b0d7f5f716148223

    SHA512

    6f14cf2f1f7a83b94bd84987085e468432a4247817af5d97448a6410d4bd0cf40f7b9cf415214599f2a2ec7fe622ccdb537914a2253b1361edf59603fdda5c06

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2b49f6b2c9afcd34473f7b080b52ecfa

    SHA1

    f8f822a3b76e17b49c5cf2974d3a7e1f3a9b23dc

    SHA256

    6bfe5c4e38ea8a33a4795ce973f8093e21c2cc5d1a8ad54f2b6e202397063d89

    SHA512

    8210c0f5ed9ff60dab3de1a8a0a23d93651e1f6b80e06c233c8992b1a84d5325a5d555ac4bde2d8e88069bc111b8259e52c5d8039eff7caed9999a4d8ec1418e

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    23eb87d1c085b530ee052261289f321c

    SHA1

    397b44f9dc77c4fdab747acd6ed5eeb84a1b5020

    SHA256

    1e68bfc81c1304f72fe5b213d5d5d03870c139020fee9b144630832fe0467ec7

    SHA512

    2f2b181cee8d23d1a9de6bb1213ce3ecfd5ee544130b376f3641159f4b1583efb0b6a88fe59bc5623fe3adf0b4c1511932fb3f4c15b55b56fbecbd64c013e869

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    822c1300b02be6d12a4eca862ee7e71d

    SHA1

    d6edbaf12d2cbd1b7f47cc53db7371b4b5942915

    SHA256

    186609193f2b1460168c6018b5616283880d79c5d90304f59a693f40eeb70e61

    SHA512

    a7f3819b0f1ecda3da7d3e24945fc173cf916a6fc3c08cca8cbc066290a9d67afd6577d0f8ece9ffa25b46d945d1a2b1ee49d74f600d331e0cd390581b1507c2

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    3627ce467f12b102815671f1561014d0

    SHA1

    4589c8a6d755b5279106a5fb0adde057b38df34b

    SHA256

    f4ab4d03044269699eeb62c30086ed88e588a0e8f9f6041424f3b8a8c83bda5b

    SHA512

    8f3ab81990050f0706e3c387af0e6a70e26cbba5cf5eec1ee0dd0127302b67421466ee7fe985a84841d975a5e7931d74ffd5a9f60a26398c9c8ff2b5ea021c67

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b015998db37c24956a1ea55977a45a32

    SHA1

    170c2892840912485c0b4f61eac3abe3df7b4fb2

    SHA256

    056176e5268ec490f2e71775036aba874cd1b6dcef763f6f569c8319f736ce4d

    SHA512

    d69605d9e5217d6277b9f48a727e6b2427729342ee37eecb60a93ba1186009fbcdfd2c94bcf2fb08ffd640d2c439c6241ab0e3cca046a45bc703b5bf32d077a3

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    fff7c5fb5bb43b34c6a6a68658fc1720

    SHA1

    2ac1b93c5b410d3005f97a2f5ab8c1b23fa1563e

    SHA256

    e78f2ff4c8700d26150800245df3dc3f85367569037e604e8465b90d19e72b17

    SHA512

    cab3035f6d61ed274a5ff44df40ae9781dd9eaf2bd65f4137b99559edbfec4313a166e3dd8aca1b86ee42bc6eb47095120cc99ad6af19154782ead8bef49b379

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e8e381296dc1a45c93606b1b18bd9ec3

    SHA1

    519a970a3224137c22e3175e09d2e22ae5207d9e

    SHA256

    37afc59bb9127a6099cfe8eb52b047126f88569d4ecb406b56146758a93f154f

    SHA512

    9fbdf8dbdd078f5d566c171e451d5691fe39fb6fb359fa21f185135175d18f8edc9c2f04f39895832a92e9cbcde18113c7f7fe9350bc3459ae736199c46c3240

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    5d1bb8ca2c2f777295c23f430586745d

    SHA1

    577098834a251018113f94ce9c28da4c7172ba25

    SHA256

    4a2525de45e9f90f93c5c9035d1f0d7cc886b63c6541797ce27dedbccd7eb2f2

    SHA512

    b578818c584c6d3aa9fd2d7864ecdd5215fe7e531c83813db4f291e7b13fc9bd96029d375226ea1d5cca2fc4b3dd111f92ee4bfaaa5625125b5aaef28b7e5cf1

  • /data/data/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2b1a75990620775ff53a6b02a51f2bdf

    SHA1

    5f50ffb20d76adb4415bd85e3eb1bb12455bf44c

    SHA256

    c6a4700fdec46c86a1daa6bce450814773e559d706cd4640ccad5fdffec96562

    SHA512

    f79f1ac906a829a3a252bbb704f8606feda18005e3b266a3b4b799376b656f33202ff2017dd812d22ee3990c8cd02ac0cf065c7f5ded39fccbcb75bfd6667428

  • /data/data/ir.PluTus.pluto/files/PersistedInstallation1090437442540621152tmp

    Filesize

    90B

    MD5

    16f599a30f249179b24f717fd82ba093

    SHA1

    30f7a0568c7d61c6b47971a3dc5c3194126b4b63

    SHA256

    0ea8efc45a7587ed9a0cca97f57e808aec1533a776e05f96fba126079834b3e3

    SHA512

    8774bb0f1c6401e9cb00a0a23835d3dc8d4da735eae66a3b04a02ec0a3b16a60c848e44bcd621a8658424bd67520be49a6e40668ee35196c0a9b0298f2cbf1cc

  • /data/data/ir.PluTus.pluto/files/PersistedInstallation6664317809336427891tmp

    Filesize

    567B

    MD5

    f2a10515bcf90e4f595a875830b987cb

    SHA1

    3b06a8ffe4d680ea46485a3cf97c3eccbd648130

    SHA256

    a4be659b6ff16cc70f4520a5b00e3516c129e6b9a18635b5934f3d30fbcbb892

    SHA512

    a3037def08d928a59795e8b7a33756bfc6ca394fd0b26b485bf2633030ba4c309ecab91be897815c9153bcf18098f9139e13d0b54ba809c9b04059473498f5e6