9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f

Analysis

max time kernel
47s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
10/04/2024, 07:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f.apk
Size

9.3MB
MD5

a914534164a0590983af6da8b1225b1d
SHA1

23a3e1e8df9fd61d49e9c9e49f566dc465e7d1a5
SHA256

9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f
SHA512

326d53751e398d04e135dfae06b7bb0d8248e5b4053601b9387c9657ae703996fa58d45413b8c691792d161216810f95ccb52758f5bf47173230d4c8348633ee
SSDEEP

196608:klPRQAppl54uM07u88Dilbbv4VGUKgdN1/qAh2qW5:kXQ+pl5SuPzbbv4Vf3N9qAh3W5

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.pen.lime

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
14	api.ipify.org
15	api.ipify.org

com.pen.lime
1⤵
- Acquires the wake lock
PID:4208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.pen.lime/databases/Marshmallow

Filesize
36KB

MD5
fe70530b536fa55deb1b8911e7281933

SHA1
fe532c303f69678e346186bbf0cd7d2787bbde99

SHA256
086894a5a6ce1adbf9bd56b2952f850943b893fca483d2617043ba996f9f54cb

SHA512
51618f25899663e427bf143c522e5a68871d11de7d91912e1b269b9c3afd09fde156763c603f76f7b4ac173ceb9db8e8e1a85985f080d98cd5a41c28c8c96664

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
ff3cb7df43c6dbf0d082315b0bf68ff7

SHA1
5bfb627ed03b79da6d5e1cf791aabacb5daac825

SHA256
b959115e4d1b5b0674a3acbeeda223131f2adfdaead63b76858551b00acb3c91

SHA512
567b989236c962bddcde824a531f18171e351654f40aa38807e638f19844431e56ac9528551cc6bed58d0c5b966564458da02a86e72860b87984e40ba08eba79

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
0582eb34c8576f3b0abdec445e8b3b30

SHA1
22814aa8e827921854c14e10ff0ee0cac8041b13

SHA256
f2d07fc1f8f4ff023530e4653542e39ff898f2a648df167811099f64d14ed2da

SHA512
6f88ca1b9b16aa92c50b32d85aed0f1d62c043135a898290faaef512e2127ffa0b782ec37ec6f26d96275cff50b36a6f03e9b48e553e81bb35f45242c6a8497a

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
c20a7992a72d6863c07204e1fa1e72f0

SHA1
dc00430a6000a0e6150d4c837c750792b279b25d

SHA256
f17525de157cf198b71e43b53286feff4d1638e8fb48db61369be1302e23d116

SHA512
6ba45c9580e68ad08e365f1e83a5c7461af55eb31bcd0de0480ce2e318b41942ff73d82d958624ddb279a72305a174fea01ab10d17d055d290442949a6f8aad0

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
62b121170798adf8a5d89e4c7d7b9193

SHA1
be33ae3c95018f87add3e08e7dcc957d67d021cc

SHA256
b9a07f1b8521889d884355183207308e9b824dd6e071ff3ee7548fbdff0da52b

SHA512
aee08f18f81bb68c65f480ee4e193c50a816e4bdba84d969b2e35737359fc578d708177fbe704e55608a7d83b0e94393c002d6cd61aa49470e4d5811ba6ec1e5

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
c706b946de7feea954a9e2c66492b23c

SHA1
3783c5f3919a76f9ebb46555b54308e68a66bf5b

SHA256
3f72534be76bd5b405e36a21cccb81fac09c295efc7e41772ba645cf5a99e65e

SHA512
6adbef74e47c2d4cccecb268c67d9fca8b77d25014689f1a9635032c524a38dafdd206b054dc04b5ffcc4284bc1de3981908278c212d87d861fd275f179fccf7

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
512B

MD5
6b59c794c6f3c41f324b75153e2b2c5c

SHA1
ea08c746425a2c6eb297e7d9d7f72eb9aeca57b9

SHA256
f91e94387ce85402cf5c8a2fc5ead9cdf75c772166d05eba56d3da6ec228cb07

SHA512
cfeb63211af7bf4702f6d37bf64be2d8b4e02797f75ff4ff05198436b4a3ccd0f59db7de2f96fd218955c3288cd8812cdecd429cb6d3c86cbec8c1b7ba338dc2

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
52KB

MD5
b0dabb589afd1cca3cddfa702afd06b7

SHA1
ed2a2e56e80836cd0f11f44e00be697991674dff

SHA256
6e2f644aa2a67b836110209c0be06173904fa137c134088b111007f16c313d82

SHA512
0d91aac18501db0932bb10ea1ce27cb1f0d385ab808d3303d506616190c8e25fd7820b60cad52812a680c0dc7ad2f80350e6b163506eab07b799ad82a7dc3b30

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
4KB

MD5
ff427cbc3b6a688742d99e9276e88850

SHA1
88b241cccb7e43b9ee250053e4d66930fb9eda1e

SHA256
9a6ca7805f8a2f1707a0bf7c1fb4e3839a3f716d9d9b7e9fd78f19241a72054c

SHA512
6e85277ba54254a571ecaf19908886a9a7a38f16f375ea6caee95160390759cac8e8396229b299c8e2f3326c85b0a267978382a3a101d709a041b4fd795b4584

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
4KB

MD5
e43cd8cd26bb8534a90bede331f1c789

SHA1
0413c1a9c764e4ed3ea4503a3695fcd283c13046

SHA256
2449e585a27c67f80994bb33df997b1f561c20d4cba13827c2e446810043f079

SHA512
f140bc88f9fd81fdcde0cfd74bf1123d8d1ae5918174952e6d31f00b2d110addcf9f8fb52da9591c25be5156f2f0670a5a6e33b53f5d948eebc3499bb5ca704f

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
4KB

MD5
a521e472cda2d7c88f13da0600ec1d3d

SHA1
9b704ea2264d26b0c0c8e3e02b33e9b9e5f61d56

SHA256
f65b5d569d75b6874481ef8fbc4fcaa89e5f596ce758a6ee709e65c1ec24e2a7

SHA512
c838e62d9a226d63f94a51d9454d1b2aaa76a75c05ae8d6afdaa513aab83a77c5fba21596c715508220422649a533af41ee3c3b8ccaf0b5f29edf39062e2dc11

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
4KB

MD5
656068b78aa054f2b6a8ffe039dbdb96

SHA1
f13c396c4d7d713f3dc558695f157b5a9dee5f76

SHA256
796e3155d509a708be0dd868a1945161cf0eae461456f7a0d656f8a0f6e0a0dc

SHA512
f747dc431744f21468f73bf882b9c8b28bd1b304f85bfd8e114b92a66bc059208805536baf150dd179353bbdcb5283924644a633245e4c6db8fe7997d7ad4573

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-wal

Filesize
8KB

MD5
e8207e3264be78729e0a4118ff3e595d

SHA1
ed6bbd3afed068e7008ff86345da769b308d64ed

SHA256
7c3f4d203634b184aebb53a3e5151d1997a447c8198c144ea21885cca6786184

SHA512
fb291d24dae5ce03e9cbb567e2bbd0cee5058e4e5b253a5a05320b82ddc5bb56716e72fb5219c09cd02564357a078efe01ac9d640aa3f3458643284a3df44a98

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
0385576249be4ea52edc852146a5ba8c

SHA1
dffd05cf1ed8d9c593355c7906982ce8a3306f35

SHA256
dd93cab863c22777198db50551b0915297e64fc76298ca14832f303003cd74d2

SHA512
6b737b3af5e31153610713e4046845cfc27a249988f57df5875f0e063d529f554eabc614f2f8e5e4df34695686d8a168a4b4c40eea40a0d0fc27416b0c087690

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
826566414e561a1c4110f5474013ebd2

SHA1
5b8f5b74f288bd34b50640989a9e272c0ee52d7f

SHA256
d872d377e96f8932fb5a9dc7540f2b99d551d6d8fe48ce38ea910ed29bdec331

SHA512
959592d6bf0718cfdf4d7d6ff1dcfdfffd411b292ff46918ed567e658e59a995c3b9095a7bb868d711f637f00231f6aeb797c0beeaf796b101f80e2dd3d0ea0f

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f1de02783133689714935bb824711f67

SHA1
4dc9ed84c883ad13966e0b82b2c8445a72182193

SHA256
8f96b4c0f21bb6c26ae95802268e6db4058b3b74ea91e17f5b1529d564634a73

SHA512
2c5935f17929411092261f845af30be7b47ca745fdffccbfb6fddecae4a68a07d1d11623b9828cbea3af9a6dd176e429fd31b5477aeba50e9bd95a7b2ae97687

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
848845e20666addc8c5cdf4ca668a89b

SHA1
92edbd9eb2640137cdb13fec53a7ddf4158969f4

SHA256
d121f0db76ff2721f5796872a00c4e58abed095d60a1722486ac6341ccff7db9

SHA512
168136320aef1934145b5281c32905246b7a0561854a46f805b3556888848874bb4261d2a1718a10b83e9b759030628e7f559ce7ae3b39b65c03a5d9c9fba7ee

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8ca4441f3a47a1db557d42ec6d39427a

SHA1
17b44aba38bf5780c564837a4adc2390cd06cd0a

SHA256
52e0ece35e4b52065bbf663140fe16d7f01bd982f4a52d9fc92940ac1c0dadee

SHA512
76e0deffdf0e55a920061625604e0b3716e99d45c38094c97bad1f97f107c020a7c4a51d5c2a06b92d366a5f6e3ca316a5e4fb0ee38a17a246f3be35a22f7cc4

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6e000bf299af6e76b8262240384bc7ae

SHA1
4e4624e17e756d2721359e67dbc17408ad1b6c1e

SHA256
415c54faa45bfbde8855c308f496c25c7d1608de6ae03eb4c98031ddd8f9a8a2

SHA512
20b6129c7be02717d55b8113d1c937f85f3fbb5392faf9e783382956166dff3573b94426a03bc0e52f3278ae1a1c08d240b3c1f2a9783f4bf838d35dee02bddc

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
44693692da738db6eb133cf0e4cde91b

SHA1
e6bda56494c325d8d37ad89552263ae85d9b0550

SHA256
8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

SHA512
b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
d470e7ee6c5a40ea1b57c14400bd3ba6

SHA1
cf89904611bd84a33ee75a9c662115140e74b7e2

SHA256
296318e756f429d7d7adea7e8cd641bd905000ce6d420c5b4bfc42dba2fd6c4d

SHA512
8abc8a1d3e86812d253a6e64b8ffa28b6b3515b30efb19f78b20cdfd7a4155ca0bf7fdeb7f01ea7e956c04f350b41d4acc96ea09ce6a10bd8c50b4b3e996d34e

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
4587ef36d0768ac0b0fc93b4d23da8c8

SHA1
0743066f460e23a517c56d9edf0649d714cb9975

SHA256
7bb38322e2fda258e236dfbf2cb4e293aa9038ac17881f5213228bbb16a12cf1

SHA512
1694806c60b7b7cf8dc9f6565e743f51fd7cbdc5ca140efb44a7d825ef55bae38acbe2eadbc92b366f016f77e9b0813e61e01f093a66c705dd58bb26a6906618

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
eea0c5c9e76d9232f08f0151b86c3b0f

SHA1
ebcd042af3e5268df80530c4143ac16a8274d064

SHA256
e952e8a3cf07385f9d01e8fd7eff632cddde9bb6cef8dcf8b0074e90ca0784f0

SHA512
935d17371a980d74da13a03cc00d3f0f9668548d9144b649a3980b76339af268c7416fb2af946c0182eb400abc2bd34ea15ead575501e9885e199a5eb94ef64e

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7d9542f5f6e51959f1a88bfc60ed2439

SHA1
36973f328c19efcb7e6acbad81620616296c9db3

SHA256
d5536b78f3066adb03b1600ee561ae321f5c60065028c7b65aeb786fe5ed9bf8

SHA512
089577f51f62cd7fb941cbe8b2fb61c05843149283f00ccd5fa1d5790692d2633a81ad02a846faf8c20cc1ee635b1d200dc585f3c2a23f98513736dcd9c332ad

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e6a9c0de89a82b8b6b4674a578f07635

SHA1
39996e2b5fc6d24dc65661882e5998ce9130661e

SHA256
469714148a3fe4b10734c84261eb5b878835148d02043a8b99a86131fa03ee01

SHA512
ca28cd3e6c2800eac796a6dc97a2ef6273d0c6dcf2d9ee5741fdac891bd2249ad936abac5c3c24e58ece4cef38a8fe973c4c2484d2e44f6c856cf65da259b82c

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f7568de46a142a97fa21c53b7b1ddf5d

SHA1
60ae3c7768502cb7e4795e3079895c1e800f32e4

SHA256
634b45b2c5f749d55d5f9b9e0fa00a747e15396d1c74ce5cc95f4066e61f20c0

SHA512
28de99cf31117c2021ae8857e2be451d83016b325e94010038c8563a84abd0b9d3ca84db74bbe5d3fe8b0f958b6c734a3013fe2e5d948a96b8be003d2e01d36d

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7b1ce3618a2d833b0c681fae1511c355

SHA1
5a37761747ef32bc1a497a7e3e73d39885ee79ac

SHA256
2501a63cbaa89e85c0e61ca67011ef676bca7b7a491cc543cadff221edd283e1

SHA512
696a7d866ed89bf2ea988012fab3435ef6353bf6ce01bec2e043909a839acd7701940cd45cee518f089065192e845389a606610f484c8b90cdc58ac16da13c13

Download Submit
/data/data/com.pen.lime/files/PersistedInstallation5243677057491139293tmp

Filesize
90B

MD5
6eb9277690e103ba0189de74db232fc0

SHA1
81bde01cb9095ad8e5f10b2104b6a1eb851a99f9

SHA256
459bf6a9fda138d15cba22efc06382895f59f2d1de207d6b0c215315d77fd107

SHA512
7bf1815498ee2abf1328b4707a99caa9a566ddde1e7a787126fd292bf698b4af5833a63d5d7106b569574c7bf2854bea1c8a51f48cb6e62691c7c403eec17093

Download Submit
/data/data/com.pen.lime/files/PersistedInstallation7088758073922142791tmp

Filesize
114B

MD5
ea2ffe99941179d27d54bf898e4a1e57

SHA1
fb45e0ad68e5420250b93b2f0a65d13f7f8752cd

SHA256
29a6f223ef39366f56b39cf8a97052ec347fd1226a0380639981fd2ba879e018

SHA512
f992ee50cdd835306b21851a589b0152c0011ff98ab560c21e5459f2b1912180da67090501d2deb025dbc1ebc1025d601e9f02980ad5c026d868a87398cac5e4

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
dfe5c03e713c5ea7faa9351dabd981e5

SHA1
c5779ada655ebb7ff64bbe05846d7501c6f7e3f4

SHA256
737020a5cdb2e5344884932ca0319d59efbc817d81ea23e6b7eb0ff905e46c6e

SHA512
d23136f8935751804e48169357a4e4e822ee830fcd1688182ace62fd1e137af5779cd2f5232995806b040e6e810ba88c4b96081281fddd957bbbc3c216a457bf

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
f575fcb41abac76e651b6090297810d7

SHA1
cb056579478a172372cc2651db8ba17a0c77a29c

SHA256
31c1dcf9e79c6abde9eb99a4a95d2dcdd3a4cb37187ba5bd9d0ccec7f53b6a32

SHA512
0c05fbccdc34fc4a22e382c395ec4262fcec66f60cf618190b18165c21fb63f95db0b1d68e3490f4c34a1f4344cddce8d2c673506757a6be1911727697a56751

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
30bc8b2a1545276b681cd4628776f7e9

SHA1
f66ead656c95e7fb93f72d28346f5c12245348fa

SHA256
e15e07807dd408c9a1dc4a79ffe0cfb8808fb0190f024a05a72386f05f9d27dd

SHA512
a42ba345a8fec1fc04179207a29c9637e7052d878a551a7e07579308e26050a635130787cfa6207c98f38324c66a4d647645ddaa88f324d9f214534f8793a3fb

Download Submit
/storage/emulated/0/Android/.com.android.setting/info

Filesize
46B

MD5
809e444dd831662784f0e21043971f9b

SHA1
749faa12dea3b21dafd6b40da457b7da03df49c7

SHA256
a73311cbbb7524ccea2f6f10eab805c340417b2fd336d99ddc4e4bc155cadea0

SHA512
bcf0e899765feda5c2daa5c1f7cf717fa703f58d1fcd03b9816dca171351ef2bfd5316a18d0863461844c6bff75862e84f0e6e97b19c3eafd621fc8177ec0ac2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads