Analysis
- max time kernel
123s - max time network
152s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
22/05/2024, 11:52
Behavioral task
behavioral1
Sample
93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6.apk
Resource
android-x86-arm-20240514-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6.apk
Resource
android-x64-20240514-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6.apk
Resource
android-x64-arm64-20240514-en
0 signatures
150 seconds
General
- Target 93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6.apk
- Size 4.4MB
- Sample240522-n11rtafa41
- SHA256 93d421b18af345591cb8b3fc3e995f5a9e78221deb0fa1e0474b2b942623d5b6
- MD5 33e4245b47968b28a760e6bcd4e5b08a
- SHA1 4c131ac68de034a5d7d019925228d038794b4f87
- SHA512 806131af5b39066c3f230a6cb1fde20e178febac2d2483d97509ae161c119c4bda93666fb501690201a8ff34dff0c34158d4e238ae61e6f34e0f9010a680be12
- SSDEEP 98304:+Wrk8fHunRhCNkweD/YZQXnqyK5tJhAnEF6joPpgKidfXZFFVtcUuxFKKo9:+WrZfOn3CSYEqyQJpLd+Xlvcs19
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sistemapegasus.pgsmobile
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.sistemapegasus.pgsmobile/files/parameters.json
- Size 26B
- SHA256 b48d0c107d2a2eb3c3c6ea368e0f5140be15cedc97ca28fb6f99dfd7eda3c038
- MD5 e142226b21e2dc8df43f8d339bcb1a93
- SHA1 362a9f77a62af474a42cf2f641497d248fa68f1f
- SHA512 c1be5f81b790417a8d6ac55572d03cf813cbb523dd601ec09b7c5bfc1aa69cc38cc2e6558897a66ee4cb9d8d2114d1897da1b4c6027e3e9501c44d700eee1f04
- MD5 SHA1 SHA512
- Path /data/data/com.sistemapegasus.pgsmobile/files/parameters.json
- Size 76B
- SHA256 0e0ccc3eb67c8e8ad984dfea24733d9d7ddc6eaf52da4f25e34c3165dea37c14
- MD5 fb9488ad10b8cf6d146cf88d273e0872
- SHA1 2d2177f36f64ef63fa0977e312e4db4dad7cbcd4
- SHA512 7f68897a1490617bb68831fbeaae82ab7a87db601c4c8f52e292729b705e78f9bb8ac56658a3833794fa21aae560e83b9e983933cc4b157f9ba0a4bfad3f233e
- MD5 SHA1 SHA512
- Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db
- Size 936KB
- SHA256 1f521b2e833a0278f287606e87f402818cb05bfae9907ef042c15c0f966a7a86
- MD5 bc89434270b2c1420b1977fd478f81d0
- SHA1 7035c7ccdd56b74ba0aaccdc3030725387700119
- SHA512 6a6e5245efccfd98cb326697c0f5d5e0906098e722e1773c9f83f00f7e166ca86318c98615fba268a447bb951f64683fa8bce87581809dc478a47ba83ae6c3db
- SSDEEP 768:l5LIbFQ6/Qva5LLgSrGAftD3qOeE4pk3hhOaqWiFetSc:/IbCvkUmDkdpxaqWiFWr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db
- Size 4KB
- SHA256 addaa33114268f8da7799dd9e4caf99bc4dc158cdcaa43c2d7891b49b196a47a
- MD5 6108783ffc9223052b7f2a45047d86eb
- SHA1 88c2b26e50fc82117b4f75af8cbfdcb628805765
- SHA512 bea40dd3d504a8b3eb75bfde30c6d16a81c6f459b31c72b477506adad629432b01fe79b4f547c04346cdcb2269e90059b20db6473db103fb7a1dc7a6124bbf99
- MD5 SHA1 SHA512
- Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db-journal
- Size 4KB
- SHA256 d074d8ce4738a658a32d7421bea7ef9a27403545db8efd42a8abc680f33be753
- MD5 6a888ac388a7afcd90b93ec04e444cfa
- SHA1 506eff148d37f11937d9c8524628d3853f522f82
- SHA512 27708679ed5939d074330af331f1c5b1fa70eb16f4a0f68e7094e8cf6fa94fd02e83f8b5b0f7560765982649faabb4c2c9c8e7de8418c13bc3ed5211776dcc82
- SSDEEP 96:7vaHikLicQ4xDDrVs2zjZvYmttiDGWTr8I:7vx8HlDtY8I
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.sistemapegasus.pgsmobile/files/pegasuspedidosmob.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/.pgsmobile_NO_BORRAR.raf
- Size 30B
- SHA256 83d8025611ffc8c9e7bc3086e3b541bfd2f6b80e5c443e545349ed629f356477
- MD5 fbee88d44ca8a5f7c4bba1877190ac02
- SHA1 fe7dc4f58e96bcc5a3fc42a4f15f712a2f43c48d
- SHA512 fb984b9de18bc0e68b4a9e2aabba08cbe46e4c5c1b4d7af775a70f6588d35864ab225d7c8770d16ad09d6d5a209475eb210249642cf39570c54d38b81d950135
- MD5 SHA1 SHA512