a6615a718675158da1cc1943cb3604b3e20c3d7f15d6989ec83364f1d2c59d2f

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
01/06/2024, 09:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HwFansClub.apk
Size 1.0MB
Sample240601-lsvvgsaa65
SHA256 9dc7c05f3b7680377bbacc7720e1c94505fc83c6c2ede9b1f3f5f7de5af9d149
MD5 f035bf87bd472dff1bb9806b6b9d148f
SHA1 d251df936c8378aa9b5f5c5f2beaeb26d2bb40b7
SHA512 8810aa1d894106f1a82e8e44fb705bfcff4fb7a1a07766c9a5bd83b10e9090ce407d585c6463f53995770dbe011e9dc55887e8c85592d607d9dd3b2afffe2465
SSDEEP 24576:JM95cK3jtrRVIeyl/ceC4g+kpwdsgjOFYAsi:JMD9trRVPyisdsQO8i
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.huawei.fans

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.huawei.fans

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.huawei.fans
1⤵
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4593

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

MobileAgent.db

Path /data/user/0/com.huawei.fans/databases/MobileAgent.db
Size 36KB
SHA256 f18209116a66877e3ed4cdad3ff1730bd2976f7b5d081eb98f345ea494240484
MD5 b129cc4ad567692d08c26d83d5be5553
SHA1 bed87c16f983e6642e81027aa6330a5be8963fc8
SHA512 6649f944930d2b4a6fa5a45c41a87fea5c8cd855ce10f58058642bf6c6fbd8e9dfd91fd5801feac515ba20c5c8b799d8704b1681a593938129600e4beb0f4a00
SSDEEP 24:TLJU439b6K2412FZkN6vR4oSy242SfUsa1WNIGSg/P:TK4Nz2FZeZyF2Sfu1ivS
MD5 SHA1 SHA512 SSDEEP

Submit Download

MobileAgent.db-journal

Path /data/user/0/com.huawei.fans/databases/MobileAgent.db-journal
Size 512B
SHA256 360851e056bb611ed3b98990c01ee732aa0d00496eb63548f51c926aebd727d5
MD5 9c427e43a80615cdf6b18087a94ac4e6
SHA1 f2d0730cf7508f524218ca0cdb640525b63039f5
SHA512 68c9ab8c299832b2d15d5672f90edd36dd25e012b0a515cf3226a1b7ed58418664124f8f35cd533f9846ccab2d1487a9ef57851eb92b0c6bd25e38967b1611d6
MD5 SHA1 SHA512

Submit Download

MobileAgent.db-journal

Path /data/user/0/com.huawei.fans/databases/MobileAgent.db-journal
Size 8KB
SHA256 24e466b963714cb9047fea3ee4b305ff09dc35d8c8d08f3d87104798f9cf850e
MD5 d02b715a86a30bc492818b0872beddf4
SHA1 e97a0015260a34871f2ddbdcf5635b8d2fb096b7
SHA512 e6aceebb82c0f041c048134b77ff60c8a8ddfdb5b11dad0173e316f68f4089f877615151df9b411081cbb2a6d45c94820a0ed84c572a4078414b7f98789b7064
SSDEEP 6:7+/l9Hzgn1z/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKA:7+tl+qLiuWdYRmBEyPbX
MD5 SHA1 SHA512 SSDEEP

Submit Download

MobileAgent.db-journal

Path /data/user/0/com.huawei.fans/databases/MobileAgent.db-journal
Size 8KB
SHA256 d1a167fbeb94f5205f9900c300db479365cebde97ce4eae4574cfd327355c410
MD5 db5bdeb3cf37ce334bd4d4827b903459
SHA1 842c2818e20120c427f0f38444d8d66833869f92
SHA512 4c38d9073175892bc225af4cf0992236e5293d7b4404e4c07320a53ec2763cfbc0e5d38d0be2416f92dc48ba5e0a94ef18b7f63abf2b4d15e49f24cad26854cb
SSDEEP 6:7+/l9VwPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKr/Hn:7+tYqLJdeWRmBEyPbkHn
MD5 SHA1 SHA512 SSDEEP

Submit Download

MobileAgent.db-journal

Path /data/user/0/com.huawei.fans/databases/MobileAgent.db-journal
Size 8KB
SHA256 53a5e4ec761bb91eef761a9a16feb413637ebd971218cb523a19b0691fb16355
MD5 0ae5fc37500d0d7bd23e141560434be3
SHA1 7a455c3f95c8ef28574712bdaa965f8dbd37c08e
SHA512 c6907e367aacb82069e55227ab6600677e9e4dafd40d36a80f33dd4dc64be5fcb5bc12fb370fe7143432a1af7ca514c54776c2961ccabc865bdcab8a21a512d5
SSDEEP 24:7+tfvqLZU439b6K2412FZkN6vR4oSy242SfUsa1WNIGS9:7Mnqa4Nz2FZeZyF2Sfu1ivS9
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads