9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f

Analysis

max time kernel
46s
max time network
155s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
10/04/2024, 07:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f.apk
Size

9.3MB
MD5

a914534164a0590983af6da8b1225b1d
SHA1

23a3e1e8df9fd61d49e9c9e49f566dc465e7d1a5
SHA256

9a7b9edddc3cd450aadc7340454465bd02c8619dda25c1ce8df12a87073e4a1f
SHA512

326d53751e398d04e135dfae06b7bb0d8248e5b4053601b9387c9657ae703996fa58d45413b8c691792d161216810f95ccb52758f5bf47173230d4c8348633ee
SSDEEP

196608:klPRQAppl54uM07u88Dilbbv4VGUKgdN1/qAh2qW5:kXQ+pl5SuPzbbv4Vf3N9qAh3W5

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.pen.lime

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
12	api.ipify.org
13	api.ipify.org

com.pen.lime
1⤵
- Acquires the wake lock
PID:5049

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.pen.lime/databases/Marshmallow

Filesize
36KB

MD5
947baf53e30d56c5144002bb7c63d9cb

SHA1
be07293d6d109cf07aaad1f70078de95f1173790

SHA256
77220b85bc2362bdca5218a2cf46371b90a2ad9ab150ad10130391bf7a62da67

SHA512
9fa512a7abaf3f7907c1c4f5beeb4daf101b4e109123724562b154840a74b438da322b604218b21b2fa26cfc48604a3eb6cd2e37e103390aa3470bdee4202701

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
3d3c492dc9505a6c46fba54e3276759f

SHA1
f15c81f5b1748283b71c705a0259c9a78e9d4ce3

SHA256
cecd9a9f4b9c61b4bda5423a31dfef67c9196a6e2695c4f2397a5d558c9bcddf

SHA512
c3d10dc7abd4b917932ff15a8a82b889137dfb096d3d853528f8e6c8f9ae83657e665315a3601ab32192e4e103f95995892b3f4b74f587e47bc5a28b3957ea80

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
90c2663eed4bef9b2868f024c8a86fdb

SHA1
2e93e501e8ddd56d2305b7ecebe80a5c4b893dac

SHA256
2354b9f349ed3c3e0b2bb9ec2c35699ce5f50210a5c9877287a1396a2d27a2f4

SHA512
e470f1da5f2945009a4331b3a779c9bd54cfe851348836638b033a1794db667c297d2166f837e29d85f1c58c704ef439e7d2d261dd2703ba4d41e342ba65f0de

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
5ed54be8fb21987cf4dcde15d4bd0530

SHA1
27229dd117cd91afc3abdef58df47a8f6d9ee957

SHA256
25c768aa461ff85951fd08cc376b1b4ed3e87a4e83a252377acfebda13aa0f47

SHA512
f3a956a2d0550b14f531f92e6473498ccff812fcf5811c6e55ebcd6e9413d4e35e41fb12ec6d791524ba13fb84c0a123c3e0444e3f0a59b7fc5b0f9b54b07493

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
1f388549e77cf4615a45015d8ee7d988

SHA1
285901725539aa80b99cb49e881522afe9164aec

SHA256
792a7559b6021e6d900a7cb79a0c7811bf5367008d359baea57245e67e04d78d

SHA512
d5c0ae0395f0900213db5b28edbeadd7655e38e14409b8d9ef31a2820451709fdc246d65c5d5ecb0b9f0a98797fea076c1f50c4b1ff6aa12fde86ce54a9033f0

Download Submit
/data/data/com.pen.lime/databases/Marshmallow

Filesize
16KB

MD5
9561dae20c5b8a704096f982d24ef6c4

SHA1
af9eda4ca7d415a2ebf7f3872f900459edbcdd6a

SHA256
8bdbf7dd27b234873084d75db0663b08886b738d5493b08fadd1f2608b511d9b

SHA512
e672e7b71a12d944c31cdf3afcde1705d6824327d34b7736ab346067e579d6c547619e4c5b76696e92236ec606dec7892b6cdd56085771f0fdd9afa51091a69f

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
512B

MD5
69bcd72fb9b6607f1fb1e1a305280229

SHA1
071e0ac580146e3dbecb043c586b6684c13242cb

SHA256
02b86e0beb3ccf173a0468a9bc5b38dee7a97174b7756080adf9b3319107c69d

SHA512
9d3760208eb3a9a9cfcb2d0fac07cf5152f578b8a86838f9fd05dc3ed0c15969eff3e277a965f0393c17d2e5e854e4024cb17869a14749b0ae20330423fae212

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
8KB

MD5
86d25b13525805207adb6d41f3725de3

SHA1
6117d111f710a2f52bd2a714cdc64dbf81928742

SHA256
3f3274bb55282dc4a4c07f0227e90dbcc1e3ccced3da2a5ee13158b59b76ef3a

SHA512
4f7579ed6f8ba12bccc3d17b504ef5e9e08ce9ecf98d3559035d939920c87771e083057b07572bc9cecbfc4e1f5f097305946513471f5ad02c6b3bfae8134ece

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
8KB

MD5
209994af07163a9cab0430a044f76e12

SHA1
b4717d8cee247c41f5b1fec16a9f5e4f33d5215f

SHA256
bd41caaf6f7b461ba7032fec215b1a0ef9b2e1019a9ddae18f6a7e4df456f40f

SHA512
6a022858549261e51f89c8dafafb0de8e2c59cbef141553b06303506a50dd61a6d25afb2e8aeabb457f07d53c8cd8f06351baaddc7eade1ed0f09cdf24357e04

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
8KB

MD5
80116538dfe5986694048ef2ac8d9ae3

SHA1
c19e975e20963e7e0cd64bdb2792e013aef13ce7

SHA256
8635d00b25c2891ff01db6d1370f965d9594b267b1301bb285976c5bb4d659f6

SHA512
4074c446615ecf6715b65b4daea8593eb2e2d626cc3681cea0f78ca8d88ede51dfa9cd61f8166768fd122cc6ca61298ff48cf132a6af6dd801b38fb66bffa4bf

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
8KB

MD5
f0c49f1889be8e8cb2e6450db5aa4cdc

SHA1
0d3044ede56380a751f0e6699af737d64aa41528

SHA256
0b7a7a46f9f1c112343435dbe43ecceb3bda7aeb25e660ec865d681094bc6787

SHA512
06d556bf03d94bb6c503af617fe1863220d141e034a755036ceb3dc1cc463f42006ad539519700e4b2b5eac3eaa8429ba18beb06e68cc4d16a139fab8fa4b974

Download Submit
/data/data/com.pen.lime/databases/Marshmallow-journal

Filesize
8KB

MD5
35c1afd50741cc1bede1802e3fb6924e

SHA1
c4db0fbcb0d91bf7723560c5ab74129395cfdc5d

SHA256
62f9622169238ca8ee9e6db05fa50e420109f67f6524f19e377c6646493c4033

SHA512
1681f970e4b9590a1098e06cdf0665db64fa5499430262c11937acae168f48a5dbc5fd84168ee28dc7aeb6241cf91bc50659b32aa1c3d895cc38284fd053ced2

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
15d5b92dcbda7ef7f9ca327a903e46e4

SHA1
ca153b66028a58d90346ff8abadbdf01b95c37b1

SHA256
e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

SHA512
2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
c261ba5cf2ac3122607099f88c390fdf

SHA1
e92921795854c06e71f4225aea3b559b022dae79

SHA256
c03e93607302d4b8de6ce9635d7af5b47be7e89e67c3c31aa055a7c08437eb6a

SHA512
dc1889d23967364393249cff918ed1fd6e43ea690862cebf9e801e2ede5e314a3e4659d44e61cb577e5a343f85f314c8a231cdb678e34142dfdd4359f0dc2b74

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
08b04d01a6f9867d3252a39208246031

SHA1
7d4a92319242f367a289bf77a578e863b57f5614

SHA256
344ecc585c9cf09ac9a2ffa588e1d5422ea2c017c524cf2c7fbbf56f9d339d7a

SHA512
1e33536ca8b89255c023622d9ce1f95fa8c4ea2eefc26ce0d7a579dd8053a8846f4ddaffa2dc7f05ea2851ebfbf31af586a7fd934d7ba79eaf002677c5f745f3

Download Submit
/data/data/com.pen.lime/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
1da93650eb0bf955950487b63883d378

SHA1
67a216b5b6dbaf8baa381df97742155631bf2c3c

SHA256
4d0a68c28047904490087b335a10ffac73f9833c30917536f6a8c70bbd8201e9

SHA512
9ccd03c95e19368eabb109b69d5073e29b66b308a287ac37259cce449597837d6bc3d6be472497a7fc49abd947b6345496ea35195515d4b516e6bd94ee37f705

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cdb0eea61ea5b5e7247213ed1c4be70f

SHA1
7e5410b2184665b999d6d239ca90914050c1b183

SHA256
c6da00ce70550c595b8baf11f5c1a69159e6d8010f5a8286cb6d82594b3faaf6

SHA512
fffbad353b0a34cf1f5e9148681b19586b029649df1ace977bb5abea09b607155df7f2ee59f360dc98064d927123fa7943e5db1c13fc537edef6f1a86c124ee0

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0836c3f9768c8bb9a155b847dcb927ea

SHA1
5d1e765175ab74f581ac4f800b9217646316adc3

SHA256
33bdc04c8e9a176915ac4a0bdf9e7dc0e683167b58e893a2900aafd33b981370

SHA512
7a8f8825d3291dee33fb37604fd54eb99a3b696cce1967a2912500a0fa1dd2017ef8bc67ae3a3e2c3587e453a48596562800129b91c728028ea9a6a6dc388319

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d014522838e1d7e7cf2bc4a6baf1a6dc

SHA1
8bd90024c060d29ca151a50c7701e9c6e6dd7932

SHA256
b272edc4ec45401a86a73fae36cb5d34adb0aee37dbd5cc01218fa2431ca7685

SHA512
e24c537d844fc73c6ec41acef2c2f1bb9c019c26fcaf6a57c6b31fb28ebbc4a8aba37c28c2280dd6500a534fe92f019c3cb5c90dfb71f957d874cd6c7e6cfc2e

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1c5e0a0f96fafb568857983b17b343fe

SHA1
e0461824cbb0ba020ed196a83feca803383fe3f6

SHA256
57fa2052ee45686567cc68eebabb1b45645ddd638b21f72fb021f83b427539ee

SHA512
01b7fa422361cd4ffa225c57ea7ab8dbacce8786ac67c795a3a7dba5535505da41a02df27b6814015a3574ac4fa84926d92b45b2603eb11712e8927f70f3ab2a

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2f1eeee3602c828b8e9f81f6fbd20d41

SHA1
d240b568bb6929702815b9a5edd05ad635671caa

SHA256
458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c

SHA512
a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
67b870e43a9b8964653db430d4a09638

SHA1
5def0c892f8adab8b1f4ad7ba66344edfd4b5dd3

SHA256
fbd69fd5b734ecad2022e6c262b06838590b63ef334cbbd05aabaf680ee9ce51

SHA512
5a8ca627f157c1e20a640f802708223dd479aa92bbdab5744d5ae1726f201ad5d0c4de8709e5074c4b7f4040527381aefca120f46ec083c99ec4bfde72b62b20

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c007851729b473f90fcb85f8cdcf8f30

SHA1
dacc102bc34d785e1bb4209f331abe172427d444

SHA256
f1b0109b7551f6046f62c8f7f49632ca59a3cf05c7f1677905145c709f950477

SHA512
b802e54894102a3f5dab4d246b4f2ada6a2fa4fa01be7be094ca4d89a38c62e9117e26fef5eb5c012502d29ee2b3f22bf983989fbf217af1dfdb1b85023b4459

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
ec0c14a6d4a659ab6de81fc2ab6cfe1f

SHA1
86efc0f4d4db5b67142b795acce42e606189a2d6

SHA256
464d8313938df2497429702d55b4d770326a7f4fd38698601cd750e9a1b5772a

SHA512
fb8855103b561bc218a9d3a85f962019139c766333ba565fb9316f4637f8d56bfe461706029715e4a594067195e2e064e2e8ab794b21c284560e9c4c081245a6

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c9d532b1db272b7d68348b3ed5a9fa1d

SHA1
c38e5ee741f8e6c0e9f24a1d146fd81495ee6c1e

SHA256
4cfe9cff2d7947b6226ab9dcc4558cf55a5637af9498247da89a37730503a3c5

SHA512
2219796968175df9b3ce0bb39c6cf95c9f483bac8f2f37eeb9b89be7e782b63848dba7299078a122e21a9e0341bdf3b403c2970591739cdf12340748afcdca2b

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
536353e520f5db977794a3f05a88a036

SHA1
7b134662434ab6a6f6209dc817aa4bbd78711dac

SHA256
f173f34573018c7f6ba9c8524a37096bf6e91d3b30d3833ccc4ab1432b1ceae1

SHA512
a22add54e8ca049862ccf1887a9c2e3c2455ff084869cf52a839681f963e9b0aa4e75bdb32716eb123160b6fa8638e433e44598e8880c1a8913006632a3d8f41

Download Submit
/data/data/com.pen.lime/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
8c099c4f306df3d9da46c7b67bc65f6e

SHA1
5d42a1d784fdec0480cae2df54f627a57c1588d7

SHA256
a59aafb3d8b187ac4431d3531de1246a61af95aeb1c2f5a37a5350d53777e687

SHA512
a1c028bae253a8544e709910913ee673f88a9f90b01ed6f3c2ca78429de6b985f5b4e69595df64dedf212b9d0bff6c50d2f04098904d78679767181f4edde8d1

Download Submit
/data/data/com.pen.lime/files/PersistedInstallation2241113729926151475tmp

Filesize
90B

MD5
b981e941040bbc8c9c90e71648006fc2

SHA1
38de48a8b34c4565aa0354b9452a7762aed38698

SHA256
6558fe99cae97c27e67996485faa6fcca8d9cdfe2e0d4f5ec5a303a13145bdf5

SHA512
3bea31c0e31bbc5e22f4189b1c307dc32748b36973720dac686d0e2d3b156e611733c5294789d29fa6950d0dceb0e2aefaf465560d51cb3479d2ce0b01649d02

Download Submit
/data/data/com.pen.lime/files/PersistedInstallation8235555919766677592tmp

Filesize
114B

MD5
7163863b9ccc478b5cf599b91842ccfa

SHA1
5e528d1d4958b96bb41165c2696a6d8c0c12007f

SHA256
1aded8c103e4820b363624303b623268c811ef33d3ab71044cbcf2b819f66261

SHA512
326dbac540e67ad0927856ac10c80d294239733623afd76689ecccea53a09f3f5d5b5b7aa368832bb649d6c06817937d5d45e5f30ac1ec9aacbe2b569beea5e9

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
e57e7c736eae3c459ec67fce3aa5abc0

SHA1
32d58ea0f27da92a063c491c038601d59767299f

SHA256
d410ab5666dbad6ed91cee225560f4847dd2d256428cfd00b57d455827d7f36b

SHA512
b5a295484505da1b7117b5492566b6be552ee7f1d13536c3ff7098ddc690977477c955baaa8960eb0766c1e671f7a1426fad60973cc0f32edd6c1818012e6aae

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
5565ad2b4f4f70377b6ca2ce04781674

SHA1
784ebfd33d860350e4909b56eeeb16432d7bfc76

SHA256
a244e73c91695f7620c8344e54a8b3583611a587934561438e7ff84b9daace7c

SHA512
ebf6bf1f30bd14d070ca64eb399e4c4b29493765c59b3d6ee5436ff854e88f37b8b37c41620610379a22be6f2767a842bc5b9bb0f2a3d5305baad5874b6bcf82

Download Submit
/data/data/com.pen.lime/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
bdece51fca1cf4fb138b7f87c3246c53

SHA1
e0c772d1543d2c315b8218cd6e1fb0308cdd84b1

SHA256
f0701eea64027728d04fd2b572a81776b679f346e3ceafbb4891503e854307d0

SHA512
27e0bb1176fdd343ad9fa9c68812a4f47d51832d03ae53e87c3e9ce68a3e13032ff5e6f8e6683035f6a9d3eed42a4a75ee8b33d56d99dbd1335faf1bfe3f089f

Download Submit
/storage/emulated/0/Android/.com.android.setting/info

Filesize
46B

MD5
bdc17e8d4eac834dc48d33dce4e31250

SHA1
b467d1ed6e391b18711ef5622f9a8726d8030e38

SHA256
14854978506fd8abea5eb04363c412a8e83fdd9a3f62ba18e97954189e7f228d

SHA512
616396cf696c3266b18e717b5874418be2df24cb584c63c58c564095399103da560616e574735f9891773f42a8735205ba4005b5c31ff48aba15f102c683ef27

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads