Analysis

  • max time kernel
    2488143s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 10:07

General

  • Target

    a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b.apk

  • Size

    3.2MB

  • MD5

    e4ec85189b362c2a0116861f3b18d9ee

  • SHA1

    41e7724be91de90bbe88254f472b3d71a6e217be

  • SHA256

    a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b

  • SHA512

    09c867591b4d44da86b9d4a83a10a96109a324eb72d834db09636f92bd4a9db3b7edc5c026676c5245affcdc7a21b051b6a2ac27625a0ad3a79bfd2e4a469eca

  • SSDEEP

    98304:tKy1q17BuerE2gERJ5kFIyhwHF70t4VnV5:k8avKhwHF70ulP

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.jwork.spycamera.candid3
    1⤵
    • Acquires the wake lock
    PID:4622

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080BeginSession.cls_temp

    Filesize

    79B

    MD5

    7a38f4a11cc591b1460eaa8190ee3c39

    SHA1

    031615549f4a07326d3405139878874136ae7711

    SHA256

    f8ded01dacb71fab5cdd6f50bd891550e6824b431ae25e1539e890ae409fa7b3

    SHA512

    615aa527947c5374608c3b80b36e0c0b6ace5807192166ed162bf52be1a7bb29e99bacf12917196b9969b6321684b8d6ff246b5a2d2b9359e90f0ddf1a7ea30b

  • /data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080SessionApp.cls_temp

    Filesize

    87B

    MD5

    d82ee72cdd6764f525f056fcc4f3503a

    SHA1

    986386ad09929f2d6da7a44788d58059528e5ef3

    SHA256

    7f9ef24236d472ba9b21130ccb0b1bd563b69d1726b41fad0bb959f638047545

    SHA512

    f673fca0d4b7d8c21fbcd26ce32c342fbdea8ce68ca33eaf8ce84f8de853d19909c2b72a9bb25e4446e50c1af73dc9354587ef6dd1d3c01d62cf938c1cc76376

  • /data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080SessionOS.cls_temp

    Filesize

    15B

    MD5

    b3d9541cc92a9153d14e5160f8d8c008

    SHA1

    2e1ac80eb381dd82a03795b682f92020348c0113

    SHA256

    1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

    SHA512

    78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

  • /data/user/0/com.jwork.spycamera.candid3/files/persisted_config

    Filesize

    233B

    MD5

    fb00276b97c306f14b59e4e406f724c5

    SHA1

    2ad85a34567929df291d298e91bd8411e8efcbc0

    SHA256

    abe752780c6e0926fb61c217fa4d3ccdf58f7d333e8595ecd60e10fab534b179

    SHA512

    cf50782e08a84702e6213b3e1e933f94d54a03ad4f43e87b245608044fd8e38db2e464ccbab280327d131a59801dc5b6b82f3223f19dc199c9e69ba5f568435e

  • /storage/emulated/0/SCOS/logging.txt

    Filesize

    568B

    MD5

    89b6964bea3099c75edf8ccc9325a93a

    SHA1

    91e0b1ac1e140b7cacad9fe363507fe134b9bcb4

    SHA256

    40ee4547fd8993ab27570f6bfe1ee5e0a30c06fbe8e364fcb09f1f460ad8ee8f

    SHA512

    59b81333b415a82ad50bd88d51d0211b23f20e94d716e11ac8eb6038235bbceb1b9653c9d6a43a6c739782961cd031c0b5f8f75cd7409221ad5e0bc19101fc76