Analysis
- max time kernel
19s - max time network
130s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
03/06/2024, 02:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x64-arm64-20240514-en
3 signatures
150 seconds
General
- Target e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
- Size 2.0MB
- Sample240603-ck8a6sgh29
- SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
- MD5 71f6cdb3d8eebe1c8e7e26896238e571
- SHA1 019134386a6d900d61285e5e986249928a9504b6
- SHA512 740e8bcde7462b99972ea472ee0cae53f4f61fcdc6d9ca1c8c44d0661323178c891f7fe82052cd7bae7239d7a953a6dcdb5e6fc42b28cd4acc9e1634e284228b
- SSDEEP 49152:I8FjWz5Kzip37zl3fg1S1RvyzHth1mFI1/3Go1eiUMG1VummJwga8TGi3U/kX1l5:IIhup37zlviS1GHoFW3aiUM6ummJwgaE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo pl.spyone.agent2 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo pl.spyone.agent2 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener pl.spyone.agent2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone pl.spyone.agent2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver pl.spyone.agent2
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/pl.spyone.agent2/databases/database.db
- Size 76KB
- SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
- MD5 dd46d6cae176055d8617ceb3d40f1d96
- SHA1 b7a971b5f755f7fd5f9041bb1a0ffb1a74d9dd57
- SHA512 54d353f7e746aa3935848cc2f694cd6cfbd1c59b6f56e276b76fad0f0a4c8ea09cd4835be8a8ccd615a7714d3e212a091d93a2b3b835f4ea767c8ba5950a5516
- SSDEEP 24:TLMiHUV2GK54evFzQQxWmlpDmUSYGvfEC62HgeJbO5SdDSH5U1GzaJGS2IeeeeeF:TTVGW4wd9fSUSYAfAed+StSO1GlS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 512B
- SHA256 b2910f4461dbb19c169b13bc06cb2743f16f0058cba40d36838f5b9b93bb97d7
- MD5 e2a41088933859ee36e338cc8ea7beef
- SHA1 895c9578193a5e3dccba6afed70caa5f93c200e1
- SHA512 66126268ce5c9aefdba8769ee4253499f1e530f9528c0aeb0a4195b4570b6980f00320128904b61b730fce9eab6e068188728febf87a1063d1bd55bd1e159f23
- MD5 SHA1 SHA512
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 8KB
- SHA256 74fba5b4fdc9feca14e465774005bfdedc17c8a0f40ef05951f4108a35bf81b9
- MD5 097fd7a25642ac43730ba1ca984c4080
- SHA1 437552e647bb6b7f68c39f8d8559f36ae24a285b
- SHA512 f52bd413ab24e2b77888a137e36d3df889c989f6ca26afd60e46f3e9af7a0ecc7293c1726d5c4fa0dd63cc8739ff47d378bb210a5e7afb9b40102b15da747b9a
- SSDEEP 6:7+/l98SFn1Ung9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKfF:7+tPQqLiuWdwRmBEyPbKF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 8KB
- SHA256 fb51c6c3c4cc5e6c0033fbb944b8f98129ca7c654ae18212285d792d04bde87b
- MD5 b5b4a1e1a6212eb173885aecf5bf1fc4
- SHA1 1328f2ef6329f1f67627c6443ff94a2a2187e11a
- SHA512 14a78eaed9b7d2adb08e75717d87c1113219b72e76efa55c9b5bdf6d2b7e2cd7ecf99051593365ec2da42ffde2e110ee8e1acb4a90700ab926090054291f31bb
- SSDEEP 6:7+/l9LGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKr/7:7+tYqLJdTRmBEyPbU7
- MD5 SHA1 SHA512 SSDEEP