10e76f9b66d07947eefe1e515379b278fe824c9b51a66b84bd5004f78e52702b

Analysis

max time kernel
3s
max time network
129s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
18/05/2024, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
libni_510.apk
Size 346KB
Sample240518-va9qcsdc96
SHA256 3937057b81437cf04b55775d9eecb9a849f8892be2300cc016b6b4534aec4984
MD5 537bdcb0cecafa461561d309951eb62c
SHA1 04e1578a5c4d58b39f4cbf5d0a08694046c55e45
SHA512 d66a5aa90b7999722634e1115d6b56fd2de3d80719a2a1d281a9d92b8c72b4fd39bf9bd942e55240b6cc559c53a812e3b3d30a24034bb2d3d31258de02818794
SSDEEP 6144:8c88RVMFJf/sEmsGKlsFBTFjWImy7woFK8vt923bZpxU8td1EX35E:z88RVkVXmvKli3+yBBvt923Vpm8d1EXe
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.google.smstool

com.google.smstool
1⤵
- Queries information about running processes on the device
PID:4253

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

fsdk80000.apk

Path /data/data/com.google.smstool/fankingbox/appapk/fsdk80000.apk
Size 357KB
SHA256 f777eed11d352fa2903e9f5ccbdd14ff9de69373261357c2a1e66b81921ac989
MD5 4aeb04e1ed6a22d8f24638b21aed5d24
SHA1 790b73b0400d5009f4b4c35e71d1f4295181d51a
SHA512 02010e13a553cbaa611875cb9b06c1388e8aeef69d9dc3a6de40db36d5a8d0b3e1e69c1212588f14c680debf1afa9beff6d29bb2547702a1095fc7afbbe8ccdc
SSDEEP 6144:J9x7MA93J5/OEmqgWZsFBTGy7ImE7soFe8vt9E3bZpXUqtdTEb3NaU2:t7M+XdmpWZiUAENRvt9E3VpEKdTEb3Ah
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbatterysaver.so

Path /data/data/com.google.smstool/files/libbatterysaver.so
Size 173KB
SHA256 009a3c893a53899476b65688cdd3eb1552795bbbfc99140d6024a0fd505c4cda
MD5 f641710776a1c7729ee7fc309aa80221
SHA1 077521112386162a806b0b915ba3f7b57d4a929a
SHA512 74e0f2d7dcf399814983db1ab9f73f639e9c09a411f6923a2d13387261c792d0f75fb9b0ed7aec74407c2d7b993821396637800e6142fe738680c8b8c4c78e26
SSDEEP 3072:ys7OyIadphoB73PAToHlfRIpGvt9FO3H73ppCkUqtFTL3+raEIbS30iaiJGr:B7ImE7soFe8vt9E3bZpXUqtdTEb3Na
MD5 SHA1 SHA512 SSDEEP