Analysis

  • max time kernel
    7s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    21-06-2024 10:07

General

  • Target

    Skygofree_pe.apk

  • Size

    1.6MB

  • MD5

    708445b8d358c254e861effffd4f819b

  • SHA1

    d190b480942ac732f282c61a540e9138a3e764b5

  • SHA256

    af848999a4b8df0e33f5a05a618c83d1f3052d4026ab77b2acf66def71df754e

  • SHA512

    bed04b686515dfa745ad093aba185b3d634ec3d59fe1ba0e9798822d10edf4308b583ecdb01c7ac86fae47919bab644ace11b00071a9cb303c21ee72826d95c2

  • SSDEEP

    24576:sMbkXftH3TfUdiug9T0QPaJepbT1+oFctqUJOfgPE2eFm1M8z/8XuB6eOr:t8tfUdiugp0QFpP1MpHeNgUXLeo

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • core.syncsystem
    1⤵
    • Removes its main activity from the application launcher
    • Queries information about running processes on the device
    • Queries information about active data network
    PID:4268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/core.syncsystem/databases/google_app_measurement.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/core.syncsystem/databases/google_app_measurement.db-journal
    Filesize

    512B

    MD5

    3d152de58b51d52e605d9b96608a4cac

    SHA1

    2a7063e518ae503f6fd575cb26c710c144f60d7c

    SHA256

    b1d3f5e36122799f89e0096c09ac3f9a8b294d98239ac96f4a66791019583fab

    SHA512

    db5f8a4fda13614963c0830476e32e70eefe4e919bbb126ac56c266f0adc9293414fe0ffd6a38dd2c29f8a01084e874d56883cc95218e896f20b751a18591af8

  • /data/data/core.syncsystem/databases/google_app_measurement.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/core.syncsystem/databases/google_app_measurement.db-wal
    Filesize

    100KB

    MD5

    fdefa6ff139fc6933c29f36f40f8ff97

    SHA1

    748c925db7787ae2fede724700ac6cdcdcb32bb1

    SHA256

    1ffae7077c1aa1dc41616236c088895476449d3451e47961e37e5230bfd06b78

    SHA512

    af2a721d827b312ef38ac82c85ab154ba99a756d340ab5d51d21c2da13e0988ea15c5629ac947afe931a1ad20c6cb8d274b5a79315bbeb6d7cc5fa753c28dc5c