Analysis

  • max time kernel
    49s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    23/05/2024, 02:09

General

  • Target
    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
  • Size 2.0MB
  • Sample240523-clafjaaa2x
  • SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • pl.spyone.agent2
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5118

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        database.db

        • Path /data/data/pl.spyone.agent2/databases/database.db
        • Size 76KB
        • SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 512B
        • SHA256 fd39e282a985afd66fe9b3c9639025425a765f24b13ed294c3754c4ad2364f93
        • MD5 SHA1 SHA512

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 f40ecbcb8a460f244a6c9b88337b8d5a04349d2a1d1e87a58981b104ce1794e9
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 3bc33531a8dde370bbc2d246229df0806140b86f70bb0036fd03c55433ede381
        • MD5 SHA1 SHA512 SSDEEP