Analysis

  • max time kernel
    51s
  • max time network
    187s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    01/06/2024, 02:19

General

  • Target
    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
  • Size 2.0MB
  • Sample240601-cr862sed91
  • SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • pl.spyone.agent2
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5130

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        database.db

        • Path /data/data/pl.spyone.agent2/databases/database.db
        • Size 76KB
        • SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 512B
        • SHA256 4291cbf22bc2a59543fb8e3bd3de35e6fe242f7d12f9adc8fb05c6283ab7efb8
        • MD5 SHA1 SHA512

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 06c8fa7e024d420352013428d02fe73233df124fda7a8f5b2176b28c771a0a32
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 b02a38c69f4c3348d5a295b548a031540c0400a256c30c7bc5b0135f8b4a6bd8
        • MD5 SHA1 SHA512 SSDEEP