Analysis

  • max time kernel
    19s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    04/06/2024, 02:14

General

  • Target
    e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
  • Size 2.0MB
  • Sample240604-cpdblaae69
  • SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • pl.spyone.agent2
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5033

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        database.db

        • Path /data/data/pl.spyone.agent2/databases/database.db
        • Size 76KB
        • SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 512B
        • SHA256 4c209acc3a99e0ed29fd8e170450816aede1fe0d818b1a398b56625b0e3de4cf
        • MD5 SHA1 SHA512

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 df701d2c50604da4a41a8653d0106a301110075849c40a8381438efba0f8d2a2
        • MD5 SHA1 SHA512 SSDEEP

        database.db-journal

        • Path /data/data/pl.spyone.agent2/databases/database.db-journal
        • Size 8KB
        • SHA256 a37cc2fed66da07aee6d80e7d466954e394cf44c780b25b030fb339e0ff2cc9f
        • MD5 SHA1 SHA512 SSDEEP