Analysis
- max time kernel
19s - max time network
149s - platform
android_x64 - resource
android-x64-20240603-en - resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system - submitted
04/06/2024, 02:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x86-arm-20240603-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x64-20240603-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
Resource
android-x64-arm64-20240603-en
3 signatures
150 seconds
General
- Target e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8.apk
- Size 2.0MB
- Sample240604-cpdblaae69
- SHA256 e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8
- MD5 71f6cdb3d8eebe1c8e7e26896238e571
- SHA1 019134386a6d900d61285e5e986249928a9504b6
- SHA512 740e8bcde7462b99972ea472ee0cae53f4f61fcdc6d9ca1c8c44d0661323178c891f7fe82052cd7bae7239d7a953a6dcdb5e6fc42b28cd4acc9e1634e284228b
- SSDEEP 49152:I8FjWz5Kzip37zl3fg1S1RvyzHth1mFI1/3Go1eiUMG1VummJwga8TGi3U/kX1l5:IIhup37zlviS1GHoFW3aiUM6ummJwgaE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo pl.spyone.agent2 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo pl.spyone.agent2 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener pl.spyone.agent2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone pl.spyone.agent2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver pl.spyone.agent2
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/pl.spyone.agent2/databases/database.db
- Size 76KB
- SHA256 c4d2fc19a3c54c2d2cadde804546ce6f62f960865b829ea240026e1ea2706e96
- MD5 dd46d6cae176055d8617ceb3d40f1d96
- SHA1 b7a971b5f755f7fd5f9041bb1a0ffb1a74d9dd57
- SHA512 54d353f7e746aa3935848cc2f694cd6cfbd1c59b6f56e276b76fad0f0a4c8ea09cd4835be8a8ccd615a7714d3e212a091d93a2b3b835f4ea767c8ba5950a5516
- SSDEEP 24:TLMiHUV2GK54evFzQQxWmlpDmUSYGvfEC62HgeJbO5SdDSH5U1GzaJGS2IeeeeeF:TTVGW4wd9fSUSYAfAed+StSO1GlS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 512B
- SHA256 4c209acc3a99e0ed29fd8e170450816aede1fe0d818b1a398b56625b0e3de4cf
- MD5 a9808ebd969e11cf80ab07f5b48e88a2
- SHA1 359080099e060db46f0fd58652137097cb0e67ca
- SHA512 0ffc95a2d808d6972eb34c1792d49ab8921ee0abf10708c231e078b8b8c0f653cf1ac076f0fa52205bb8b4a10f45bc5b51042b2e0c4cec2dad365f28647163ec
- MD5 SHA1 SHA512
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 8KB
- SHA256 df701d2c50604da4a41a8653d0106a301110075849c40a8381438efba0f8d2a2
- MD5 85a84595e1b705da8c8ddc127f16eabc
- SHA1 c39d78a613b89888a1f6a1b3025447a408d6d81d
- SHA512 477967ba57942fdb622f9fd72fade935e15f673b06853cfad5f16130ef469c464ffa54c45739ce0396bc9560db68cd37ea8d0e3654494f27f702bfc4ce49a31d
- SSDEEP 6:7+/l97UHn1ZXsWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKgR:7+tNU3fqLiuWdwRmBEyPbF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/pl.spyone.agent2/databases/database.db-journal
- Size 8KB
- SHA256 a37cc2fed66da07aee6d80e7d466954e394cf44c780b25b030fb339e0ff2cc9f
- MD5 1230c9f96971f988a76c267313b55b5b
- SHA1 68f3f67da0ce6b7ad5af05f32e3a9e7b0506b33c
- SHA512 00eac25b610bca9f889bc245c03a1d4358d8ea3650a8e8429af5af6cbb3943b23dd77555a5a857a1c27a52cf616dc6d9bb7b60e2c77bc23d496ab499a5526bb9
- SSDEEP 6:7+/l9SPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKv/4c:7+t8qLJdTRmBEyPbQ4c
- MD5 SHA1 SHA512 SSDEEP