Analysis

  • max time kernel
    44s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    02-06-2024 02:05

General

  • Target

    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk

  • Size

    2.0MB

  • MD5

    71f6cdb3d8eebe1c8e7e26896238e571

  • SHA1

    019134386a6d900d61285e5e986249928a9504b6

  • SHA256

    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8

  • SHA512

    740e8bcde7462b99972ea472ee0cae53f4f61fcdc6d9ca1c8c44d0661323178c891f7fe82052cd7bae7239d7a953a6dcdb5e6fc42b28cd4acc9e1634e284228b

  • SSDEEP

    49152:I8FjWz5Kzip37zl3fg1S1RvyzHth1mFI1/3Go1eiUMG1VummJwga8TGi3U/kX1l5:IIhup37zlviS1GHoFW3aiUM6ummJwgaE

Malware Config

Signatures

Processes

  • pl.spyone.agent2
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    PID:4509

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/pl.spyone.agent2/databases/database.db

    Filesize

    76KB

    MD5

    0379f2b646309bcd59a19760005dd257

    SHA1

    9185b00c3401321841b1c7edd10624a13c2dd47f

    SHA256

    62c0d663334435c7b56f7ef5ee45ef1e1476f9ef39ea6667dd48962eadb0216f

    SHA512

    387a118af4cd9315a8e5323b7a2b78e5214b0556448cdf6a68335ecda5615dfd0c1ca0313d8b355e8489980635319d90f2b7b25889b1e556c11b7657bc184fe8

  • /data/user/0/pl.spyone.agent2/databases/database.db-journal

    Filesize

    512B

    MD5

    24ce25aa4015b028a5679b7174c6fb03

    SHA1

    3cd0f190932f6df7236178602a9cafee87353b35

    SHA256

    a333ac1aea2bcaffbb57eefdcf2c033fe782b086e9514f87d1eb63373c089360

    SHA512

    ef86e4c101bc65669440e20438e9b928a64293b5937c188fcfb30ec5cbc603bd8e1cfd81b3df98ea7acfcba24c3bdaf460752f49d7cd097e6e7911ad8cb82333

  • /data/user/0/pl.spyone.agent2/databases/database.db-journal

    Filesize

    8KB

    MD5

    6ee57d1f836b5b724f0f3d024ef52322

    SHA1

    cec96433cf5017727325f47db6cab5a51ffa6cc5

    SHA256

    cc0cbdd83a73e05d355d1bca33de035e726ca842ef1dc284555d808e95046d78

    SHA512

    3404251213f09dfd8def50bcb18d4f829173787c91a03ef93a9cb76bb0b2a3f143ae1231e00e6f4e76fe5510a9197554121bc9a512f2781396f92868cf616703

  • /data/user/0/pl.spyone.agent2/databases/database.db-journal

    Filesize

    8KB

    MD5

    248a59d1192799c9e3d28a3ca96b45c8

    SHA1

    f97d4fcab31b72365a86334593aca5558ddb7193

    SHA256

    77985098eb8b137fb57cc37c193194a7b642abfd053ee06f2d47fd7e8b20d73e

    SHA512

    95848d3e411a6db19a750669b19e7de9a329d739b4ae23fddd3ed922e380d480d24ed788d7f10703bedbb7fd8282f5a1137170d30c9b266b45849f259e1e9bb7