Analysis

  • max time kernel
    123s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22/05/2024, 11:52

General

  • Target
    93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6.apk
  • Size 4.4MB
  • Sample240522-n11rtafa41
  • SHA256 93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.sistemapegasus.pgsmobile
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4316

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        parameters.json

        • Path /data/data/com.sistemapegasus.pgsmobile/files/parameters.json
        • Size 26B
        • SHA256 b48d0c107d2a2eb3c3c6ea368e0f5140be15cedc97ca28fb6f99dfd7eda3c038
        • MD5 SHA1 SHA512

        parameters.json

        • Path /data/data/com.sistemapegasus.pgsmobile/files/parameters.json
        • Size 76B
        • SHA256 0e0ccc3eb67c8e8ad984dfea24733d9d7ddc6eaf52da4f25e34c3165dea37c14
        • MD5 SHA1 SHA512

        pegasuspedidosmob.db

        • Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db
        • Size 936KB
        • SHA256 1f521b2e833a0278f287606e87f402818cb05bfae9907ef042c15c0f966a7a86
        • MD5 SHA1 SHA512 SSDEEP

        pegasuspedidosmob.db

        • Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db
        • Size 4KB
        • SHA256 addaa33114268f8da7799dd9e4caf99bc4dc158cdcaa43c2d7891b49b196a47a
        • MD5 SHA1 SHA512

        pegasuspedidosmob.db-journal

        • Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db-journal
        • Size 4KB
        • SHA256 d074d8ce4738a658a32d7421bea7ef9a27403545db8efd42a8abc680f33be753
        • MD5 SHA1 SHA512 SSDEEP

        pegasuspedidosmob.db-shm

        • Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        .pgsmobile_NO_BORRAR.raf

        • Path /storage/emulated/0/.pgsmobile_NO_BORRAR.raf
        • Size 30B
        • SHA256 83d8025611ffc8c9e7bc3086e3b541bfd2f6b80e5c443e545349ed629f356477
        • MD5 SHA1 SHA512