Analysis

  • max time kernel
    2453919s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 09:18

General

  • Target

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7.apk

  • Size

    2.0MB

  • MD5

    dc9f73c8ec88a8b493a15a3cbcb36f15

  • SHA1

    29a918ace8255bb2da4c31d4781acdcfdbee2413

  • SHA256

    9b9c2e0bdf5480aabbd0ab79de16a826bdbd11a142ce117e3f49f44b0b91f4c7

  • SHA512

    ae3f46396092bdfbfb9d6bb01ff96e5eaa6b19512caf0ea127750e8f629d5c8b6fe4840ff59abd83736af0182be6d4d704d9f62d60f365f0636c2e3192d3bb7f

  • SSDEEP

    49152:jrEZhWeMoyr3SCIVjZTqErr3I/UIFL4paQ0CryEcYWfcy71:6hWeLyrCCSZTq2YjFL4p5rzcYq1

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.PluTus.pluto
    1⤵
    • Acquires the wake lock
    PID:4471

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.PluTus.pluto/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    326bdf76ca8fb7e591559f2bf7e425e3

    SHA1

    6ff9e699ab3ef6c4248348dfa6cc3457d46588d8

    SHA256

    d7a9aaef0ec7be200cfa084f501a1252e237ffbd793332a59e3a25d399f36caa

    SHA512

    d3c5450777defcc8e7e93247dfd390c969372935ac91302ce66fc6419454d5157eb1b6504f5cca954ac5180cc8753e8bb1fc09c7485f0aea42f48eeb86ca19f5

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c08f3a465c918d9cc515ba36c31d3e37

    SHA1

    73681957cc5149691540d0db666803fecb1c58c6

    SHA256

    ddac6805ecdcc1cf499cb447bbf53a0573308c49241cb29909cbfab65f57cfb6

    SHA512

    c81833e334f4c7daa75a71b0901d14e9e573fef99571ff27b60235fff2a67f23d7c26c0bd68fbe576ba580cb45b11c7d278579fd9c3cd0126edd5ba994301936

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    527c196987a12e6856af6e40313db853

    SHA1

    483e66ce97eaa9de457ed1fd2ae92329969f2f89

    SHA256

    dd97a2d3f94f9d69ab007ede11a9358d4898975dd0b41dbfae2235e33d2eb7ce

    SHA512

    7412315542f8a410acaca61a3675d09bae0a81a5010046dfcd1bc9c8ca8cec93302576d5cd79ad65850d7388f542e076c323b8d2075e186eb6f5aaf86adbc0be

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6bd6c1bf6db4bf00450a4041b27db62d

    SHA1

    00c02721a5bd2656fa1aa9ea16cafc46e97dc362

    SHA256

    fabb02abee7430bc19310cffcd93f1e61428e5ca4fd6c9f72fbdd2a45b5a788e

    SHA512

    7f0b9bb8d87020e0258b58e43d6baa6c42d8b3611689dfb6245a2a4cb02f679ada346be53da64787dc19818d27a563389f5b577be98c4ad5004c52fac740a66e

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bfbf1a2f3f8cf92f01818d560012219e

    SHA1

    b1a92e8a6cf0d3c1dd3c30eb3cb6540b35fa4049

    SHA256

    9d885cd7e32073d5a366fe2dce2358a425cd57271650355adb1c70a437dd233a

    SHA512

    93bbd8265d555b365ad4f1fb95587916f7dff7d1deaa522bb9f9ddafa3f66724007d03de8cb114bbd35eef2fb31f8c92e2cf30d4f5fd8bb7bcfc9d063948cfd5

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2122f7ad0f5beb9e0aabd15d45892987

    SHA1

    020f4879a44f18d78af64e5d6a837151561d59d0

    SHA256

    ad8615faf1d2a9c160c54baa696143985b3a5962bbde25f14ac53e51d0e6e819

    SHA512

    714ba88a752eeed27ea344d3be1c260f9e0174c82571fecc167dd8668d721afa516a061ce1920d1215e96da60dd05d5e178751f3eb7e997a0b4c987b7051deeb

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    d3b2551fef3bb3e68cac45eb4f30e6d4

    SHA1

    6978c792e564c2589775f00e0feaed03f1dbaf11

    SHA256

    60619aabf7479ebf401943806792e749ff57dd51324277849c92bfafa5ca7e8f

    SHA512

    bf957801c51d600d869fd35a28ef0712149d58816c1ca0b14f31f258a64b89d771ec56301667ed08484dc6e8d76fb24d8980e93cf2c0506df60c55cddb05a0aa

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    fc0c959161e0d1c423437022d447ec50

    SHA1

    645f5b0d3ad0fc33d42caa9f6737f1d4ae2306f8

    SHA256

    488044d3f2aaaa9e71f0775cf96bd3ed8f72cfef3eedb674a752de959cd37066

    SHA512

    7539c37b726f731f15a8ffad306740b497126074c76a19a7e2598e96c294db337e0b52f35c381b68f2106a93601de100a88584a21744f7a7cbe7659c466a5fa6

  • /data/user/0/ir.PluTus.pluto/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    8beed841c84e1189a724a866ab87d8cb

    SHA1

    713a1cb8017813c248feff292c6f48947113382d

    SHA256

    36824598ffaf88c7660927fceaa6bb63d6e5a98c310d015b5990aa32b1d98b06

    SHA512

    7b77aee32ef1bfe6b246c0f7bf1c7a2fda7f3f419cdaf54e44a1e7d7b513680be9f923473cdc4dafa278839d011859a346d28f550c102cd2cb6e5e09164788eb

  • /data/user/0/ir.PluTus.pluto/files/PersistedInstallation1152514142382885545tmp

    Filesize

    565B

    MD5

    86e2d23ee55d7ec47274b40ca73187ea

    SHA1

    0c01478054d921709072d94c2a87350c44441b38

    SHA256

    022687d883387311c2f041610e6343fc265350b5744f2ebff8e5035066f57b61

    SHA512

    17dd43252b0c5498d503794f8650b4b3e733e38536cbcea67f9e33b0f3f921f0ee25b3235a2b45da0fd7ecedf6b75d239d43d1a4f1a2d1d4d3c0f468cf30fc24

  • /data/user/0/ir.PluTus.pluto/files/PersistedInstallation8383057796429657277tmp

    Filesize

    90B

    MD5

    d97196c40941aa62bf22780061558aac

    SHA1

    cb9f0acdba43957ccaa95688fe57b6cc1709a50b

    SHA256

    c939bee0adff5c1e0fe94e57c22d77d0aa93114d93a750489a18baf3ed80354f

    SHA512

    df7551de70b41dd6bae0d9795ab65917fea6e827f6426029bef29cafec256394b7025953741e7f27ad06d0f57071e813f0c17e4b6017019c7a11111fd37f32a2