Analysis
-
max time kernel
95s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
23-05-2024 02:09
General
-
Target
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
-
Size
2.0MB
-
MD5
71f6cdb3d8eebe1c8e7e26896238e571
-
SHA1
019134386a6d900d61285e5e986249928a9504b6
-
SHA256
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
-
SHA512
740e8bcde7462b99972ea472ee0cae53f4f61fcdc6d9ca1c8c44d0661323178c891f7fe82052cd7bae7239d7a953a6dcdb5e6fc42b28cd4acc9e1634e284228b
-
SSDEEP
49152:I8FjWz5Kzip37zl3fg1S1RvyzHth1mFI1/3Go1eiUMG1VummJwga8TGi3U/kX1l5:IIhup37zlviS1GHoFW3aiUM6ummJwgaE
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes
-
pl.spyone.agent21⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/pl.spyone.agent2/databases/database.dbFilesize
76KB
MD50379f2b646309bcd59a19760005dd257
SHA19185b00c3401321841b1c7edd10624a13c2dd47f
SHA25662c0d663334435c7b56f7ef5ee45ef1e1476f9ef39ea6667dd48962eadb0216f
SHA512387a118af4cd9315a8e5323b7a2b78e5214b0556448cdf6a68335ecda5615dfd0c1ca0313d8b355e8489980635319d90f2b7b25889b1e556c11b7657bc184fe8
-
/data/user/0/pl.spyone.agent2/databases/database.db-journalFilesize
512B
MD57dc10aab01eccca1d26ff0ff900f3820
SHA16ced820992774652c5048584c274322c4e039e52
SHA256d2707ed0a6e99af95623e5cdf79342bc05100027cc42fb371ed7402c8a30b2c4
SHA5123f2164e710e45ef48de4097a3029b1d204271c1bb98f9bc0ff2120c8bf23f347466611caf087404a8a17122c5db73b5d5f17398f1d6f0d4408768633fe95043f
-
/data/user/0/pl.spyone.agent2/databases/database.db-journalFilesize
8KB
MD570ad3cee0bb6e0f810dcb442beed1fc2
SHA139d59325d56bfc681be8ee032e4789f7c3291220
SHA2561ca1feb4bf74bae99920e3d084038ddf42080788760c99bd82269415f68159ee
SHA512f2dc46eff1221ec75b07d4d77a7b94db6fc8e2829051d8d9abd71cdbb83af4fdbefac56021112fbbc601e33e980c4ffbe42e51fe38cb11cfe057cdc13c1d52e8
-
/data/user/0/pl.spyone.agent2/databases/database.db-journalFilesize
8KB
MD523846ba76e82b15369714e90e05537eb
SHA1f403c9cbdc3a11a6043a2f98b5cf5f76ed2bb0b8
SHA25689bd7a1c9b60f9b13214a34eac35cc80682adf315598d6443b605f3e2106437d
SHA512f69c1c71bf36b85aa6cf3c437bd1c95773dc049d20d0e2bde2504a546444e6489a5c79d1a897a73f13655991e05134540e7941bd5a93b128f77c1a996fcdf881