Analysis
-
max time kernel
7s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
21-06-2024 10:07
Static task
static1
Behavioral task
behavioral1
Sample
Skygofree_pe.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
Skygofree_pe.apk
Resource
android-x64-20240611.1-en
General
-
Target
Skygofree_pe.apk
-
Size
1.6MB
-
MD5
708445b8d358c254e861effffd4f819b
-
SHA1
d190b480942ac732f282c61a540e9138a3e764b5
-
SHA256
af848999a4b8df0e33f5a05a618c83d1f3052d4026ab77b2acf66def71df754e
-
SHA512
bed04b686515dfa745ad093aba185b3d634ec3d59fe1ba0e9798822d10edf4308b583ecdb01c7ac86fae47919bab644ace11b00071a9cb303c21ee72826d95c2
-
SSDEEP
24576:sMbkXftH3TfUdiug9T0QPaJepbT1+oFctqUJOfgPE2eFm1M8z/8XuB6eOr:t8tfUdiugp0QFpP1MpHeNgUXLeo
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
core.syncsystemdescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses core.syncsystem -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
core.syncsystemdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo core.syncsystem
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/core.syncsystem/databases/google_app_measurement.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/core.syncsystem/databases/google_app_measurement.db-journalFilesize
512B
MD53d152de58b51d52e605d9b96608a4cac
SHA12a7063e518ae503f6fd575cb26c710c144f60d7c
SHA256b1d3f5e36122799f89e0096c09ac3f9a8b294d98239ac96f4a66791019583fab
SHA512db5f8a4fda13614963c0830476e32e70eefe4e919bbb126ac56c266f0adc9293414fe0ffd6a38dd2c29f8a01084e874d56883cc95218e896f20b751a18591af8
-
/data/data/core.syncsystem/databases/google_app_measurement.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/core.syncsystem/databases/google_app_measurement.db-walFilesize
100KB
MD5fdefa6ff139fc6933c29f36f40f8ff97
SHA1748c925db7787ae2fede724700ac6cdcdcb32bb1
SHA2561ffae7077c1aa1dc41616236c088895476449d3451e47961e37e5230bfd06b78
SHA512af2a721d827b312ef38ac82c85ab154ba99a756d340ab5d51d21c2da13e0988ea15c5629ac947afe931a1ad20c6cb8d274b5a79315bbeb6d7cc5fa753c28dc5c