10e76f9b66d07947eefe1e515379b278fe824c9b51a66b84bd5004f78e52702b

Analysis

max time kernel
4s
max time network
151s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
18/05/2024, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
libni_510.apk
Size 346KB
Sample240518-va9qcsdc96
SHA256 3937057b81437cf04b55775d9eecb9a849f8892be2300cc016b6b4534aec4984
MD5 537bdcb0cecafa461561d309951eb62c
SHA1 04e1578a5c4d58b39f4cbf5d0a08694046c55e45
SHA512 d66a5aa90b7999722634e1115d6b56fd2de3d80719a2a1d281a9d92b8c72b4fd39bf9bd942e55240b6cc559c53a812e3b3d30a24034bb2d3d31258de02818794
SSDEEP 6144:8c88RVMFJf/sEmsGKlsFBTFjWImy7woFK8vt923bZpxU8td1EX35E:z88RVkVXmvKli3+yBBvt923Vpm8d1EXe
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.google.smstool

com.google.smstool
1⤵
- Queries information about running processes on the device
PID:5137

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

fsdk80000.apk

Path /data/data/com.google.smstool/fankingbox/appapk/fsdk80000.apk
Size 357KB
SHA256 f777eed11d352fa2903e9f5ccbdd14ff9de69373261357c2a1e66b81921ac989
MD5 4aeb04e1ed6a22d8f24638b21aed5d24
SHA1 790b73b0400d5009f4b4c35e71d1f4295181d51a
SHA512 02010e13a553cbaa611875cb9b06c1388e8aeef69d9dc3a6de40db36d5a8d0b3e1e69c1212588f14c680debf1afa9beff6d29bb2547702a1095fc7afbbe8ccdc
SSDEEP 6144:J9x7MA93J5/OEmqgWZsFBTGy7ImE7soFe8vt9E3bZpXUqtdTEb3NaU2:t7M+XdmpWZiUAENRvt9E3VpEKdTEb3Ah
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbatterysaver.so

Path /data/data/com.google.smstool/files/libbatterysaver.so
Size 181KB
SHA256 a6778f44f472cc613a17ca8d3007d8ad3b958d48cd701535586b5f0e9c956e1c
MD5 0788c7c63519d4b24d06fd297d5764bb
SHA1 bdf462831a2be37319338508b23902f6de7d2295
SHA512 e6c9c0d0d5dd6970b2006033f38e3fa8edde82d1bd7e6bb9ebd1512139b0541b6577b88b71a25f1bbed7b0c66c732201cea44ab6f5e9a4fc55a60ec49491ce1a
SSDEEP 3072:6o9A67MADen+hNJ5/uMaajmEmu45uUpzgz5ApQ1GRWqBTGG:t9x7MA93J5/OEmqgWZsFBTG
MD5 SHA1 SHA512 SSDEEP