Analysis

  • max time kernel
    19s
  • max time network
    130s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    03/06/2024, 02:09

General

  • Target
    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
  • Size 2.0MB
  • Sample240603-ck8a6sgh29
  • SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • pl.spyone.agent2
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5116

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        database.db

        • Path /data/data/pl.spyone.agent2/databases/database.db
        • Size 76KB
        • SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 512B
        • SHA256 b2910f4461dbb19c169b13bc06cb2743f16f0058cba40d36838f5b9b93bb97d7
        • MD5 SHA1 SHA512

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 74fba5b4fdc9feca14e465774005bfdedc17c8a0f40ef05951f4108a35bf81b9
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 fb51c6c3c4cc5e6c0033fbb944b8f98129ca7c654ae18212285d792d04bde87b
        • MD5 SHA1 SHA512 SSDEEP