Analysis
-
max time kernel
2488143s -
max time network
159s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
20/12/2023, 10:07
Static task
static1
Behavioral task
behavioral1
Sample
a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b.apk
Behavioral task
behavioral2
Sample
a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b.apk
-
Size
3.2MB
-
MD5
e4ec85189b362c2a0116861f3b18d9ee
-
SHA1
41e7724be91de90bbe88254f472b3d71a6e217be
-
SHA256
a0197596a52f393c1c368a1b9e24444a81ae4931288f7bb9f901822b3f75b87b
-
SHA512
09c867591b4d44da86b9d4a83a10a96109a324eb72d834db09636f92bd4a9db3b7edc5c026676c5245affcdc7a21b051b6a2ac27625a0ad3a79bfd2e4a469eca
-
SSDEEP
98304:tKy1q17BuerE2gERJ5kFIyhwHF70t4VnV5:k8avKhwHF70ulP
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.jwork.spycamera.candid3
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080BeginSession.cls_temp
Filesize79B
MD57a38f4a11cc591b1460eaa8190ee3c39
SHA1031615549f4a07326d3405139878874136ae7711
SHA256f8ded01dacb71fab5cdd6f50bd891550e6824b431ae25e1539e890ae409fa7b3
SHA512615aa527947c5374608c3b80b36e0c0b6ace5807192166ed162bf52be1a7bb29e99bacf12917196b9969b6321684b8d6ff246b5a2d2b9359e90f0ddf1a7ea30b
-
/data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080SessionApp.cls_temp
Filesize87B
MD5d82ee72cdd6764f525f056fcc4f3503a
SHA1986386ad09929f2d6da7a44788d58059528e5ef3
SHA2567f9ef24236d472ba9b21130ccb0b1bd563b69d1726b41fad0bb959f638047545
SHA512f673fca0d4b7d8c21fbcd26ce32c342fbdea8ce68ca33eaf8ce84f8de853d19909c2b72a9bb25e4446e50c1af73dc9354587ef6dd1d3c01d62cf938c1cc76376
-
/data/user/0/com.jwork.spycamera.candid3/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658638CE03A6-0001-120E-104764067080SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
Filesize
233B
MD5fb00276b97c306f14b59e4e406f724c5
SHA12ad85a34567929df291d298e91bd8411e8efcbc0
SHA256abe752780c6e0926fb61c217fa4d3ccdf58f7d333e8595ecd60e10fab534b179
SHA512cf50782e08a84702e6213b3e1e933f94d54a03ad4f43e87b245608044fd8e38db2e464ccbab280327d131a59801dc5b6b82f3223f19dc199c9e69ba5f568435e
-
Filesize
568B
MD589b6964bea3099c75edf8ccc9325a93a
SHA191e0b1ac1e140b7cacad9fe363507fe134b9bcb4
SHA25640ee4547fd8993ab27570f6bfe1ee5e0a30c06fbe8e364fcb09f1f460ad8ee8f
SHA51259b81333b415a82ad50bd88d51d0211b23f20e94d716e11ac8eb6038235bbceb1b9653c9d6a43a6c739782961cd031c0b5f8f75cd7409221ad5e0bc19101fc76