f650d333d32fce85a906bded4fc57213c90052b08f9ace1c0cca5e658eeb7432

Analysis

max time kernel
179s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27-07-2024 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f650d333d32fce85a906bded4fc57213c90052b08f9ace1c0cca5e658eeb7432.apk
Size

2.9MB
MD5

eb252a58ad9b57f0a570ae558acc2944
SHA1

c29cff7b0613440d721bd2aeb28136df6360720a
SHA256

f650d333d32fce85a906bded4fc57213c90052b08f9ace1c0cca5e658eeb7432
SHA512

26fa710f68231309c43013d62266319bfca20590cbc76ea7b399cfc7208da6c53fb13d2a06134ebe907c094cc18b555c5a47d48c12184c587f1c6efec13e8c93
SSDEEP

49152:gSwIWI9ccWpr8U5qMxPZSpp/QtcnHJtLQAj7iXVDuWVcT+BFkcGZplDesZ8RygCf:FwInccW2xvpRQmHca7QbVTBFkVrp7RTb

Score

4^/10

execution persistence

Malware Config

Signatures

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

Processes:

com.pasinawuwi.print

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.pasinawuwi.print

com.pasinawuwi.print
1⤵
- Schedules tasks to execute at a specified time
PID:4253

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.pasinawuwi.print/files/profileInstalled

Filesize
24B

MD5
ec7628efdccc0044a6b2d2a15f523c19

SHA1
9c6256c0c116fbe041bc9ea3605e98ef84c284b1

SHA256
027d50cad055ce36a54858f2c835025f648387d741c9ad9c3e16d89f6d9c2eba

SHA512
9c48bb12d11bd2f7d832d33f680f54f0fbebb02c1c7df40323776484c9136bdf33c6095448b060638497bd03df660c24d8172a2f5fcf757a1ccff58eb3113de8

Download Submit
/data/data/com.pasinawuwi.print/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
6b7a5d300a8b005536908fe5e763e8f8

SHA1
cadaa55eda6c183b03161bc30c6e8916059948ae

SHA256
44eba11a66e7850a0828978ed800ad53024a7c5c9fa7f39fd1e228c911a7756f

SHA512
6cd16311f2b833e21adcec61bc73e99bfda8a4a03856ec2dfbc31e05fa4557e2199b17bb27b16be8c18b64c1589ad6a28ca11352174aa9b6456920dba0029ed7

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb

Filesize
140KB

MD5
9502ec5b5f50f04312c9ff6b2c0dc259

SHA1
3064052671275b64f5f42f3934d6c3b999e66d2b

SHA256
82fbc03182c8a7e012f08bc63a3f3a227ad5ca2495d0a671f359778322af303a

SHA512
39860a3765d7b1bb7a92667bbb4fc3bc01d5d29373cc5099172dec501d2416e543e211d5a5dd00e84fcc50be7aa22884b7ff6ff74f79ce9c8551bad5e3c8dc62

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
6c94d638f23828dc7fba2d8715041ed8

SHA1
6068c7be4f1863d4b7bfc49de4f84e2f0e0c91bf

SHA256
1606e88b044c4d3d293f1dc8888e56f4c419baaab1322ae70f113bfe9c27b02d

SHA512
f4a0f24d698542d74c60ba3ca8f870b47841ac3c0c37dff988edcee2b44bba580afb8e2038ef3e1477f86fcc3d09fe98b043f8e3e41858be348bfd2dda96297b

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
3348006d288d3b162c1bd23a5489dc3d

SHA1
0c679a3cc77a98e7ea5405bf2af44f6f95944845

SHA256
2795ae65d995d33b8b1b27242f8223625d5581fa42129a1d10f9552b535f9607

SHA512
a27efa74bedc5a16a510a7769096e44a1b6e57b18eb1a254b4e9f95b5e5590190d61184e4fe6e0a4d9988694f485d0cae984b3ea3c12c74eb267b24e708249ab

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
564c0c1e8d39b9c49babca6e28dc5c19

SHA1
b5fe05fe8c62e7f30aa7c1bfd3222f45fed100a8

SHA256
2a0760068cb0f0bc9da5493af901ce8eeca4babb4ac4e797fb670f2a48d32c31

SHA512
a579ae3dfeb9095e6ea090329a0663ee9fcdda06e31522aa43a891db82a31cb851418870bf130eae476922c6c3ff71f6a52531ed81ccaeba26d01b8b6eda6083

Download Submit
/data/data/com.pasinawuwi.print/no_backup/androidx.work.workdb-wal

Filesize
426KB

MD5
abff36d571d784e9dd8876243c9ac252

SHA1
103aef2a2dd44f76f16398a8bc69891d3893dcd3

SHA256
eb6fe85b75e5918039a626d244853e454dac30c522ca3c70d6b6c59e46404526

SHA512
845c1a02c041dbf1e796927361b774f4f695d1f78f7ad38f24235b19b196f9c3d6819acc4205b1f71138fcc6e8c30a6b287b4f1d4e73cf598ccbbba8a80a1d33

Download Submit
/data/misc/profiles/cur/0/com.pasinawuwi.print/primary.prof

Filesize
3KB

MD5
283abdcbe4245d34f879f215e2a01ef1

SHA1
677588d7da6936bd96483952442b22b67dc7dea8

SHA256
26b72fb797b3539dd35ee9f33945827164154d781c3360060ef41429104ce14f

SHA512
6770aac45803138c30394af2554f573c1af2053f344676397628f767e8c0d4f9cc72326859c703515d8aedbb6065d06c92eb10957595c453213ac61c90ee91ec

Download Submit
/data/misc/profiles/cur/0/com.pasinawuwi.print/primary.prof

Filesize
3KB

MD5
459e862bc25e1b92893e62990357947f

SHA1
acd2dc138f7b859d21223bd6f20751adb5dfe652

SHA256
4ee43c8bf1a023932cdd1bc15237d1e47c39e278d2cf7593e8fa9c57d97bdf5f

SHA512
3f5f859a55c83b639e8a5800026619f39dfc450fbad1da6e4a322a53dd3a8aa22ce42d24b36203a4f9ab195b06ca97de0a776831bd04a1600f98e97dd6bff72b

Download Submit
/data/misc/profiles/cur/0/com.pasinawuwi.print/primary.prof

Filesize
1KB

MD5
a1f30e03e097b22079260c153cb18793

SHA1
342dd39780450d75aa8f36818523600cc0fbfb9d

SHA256
171566a793af907d14566b651d0364181226e9fd7d6b54f4105fef2fa19f86cb

SHA512
8786d047b7ba946b7cdb0ca78379c369726127b9197b21867f5e9fe133999ace6ae91c3e65c06e2a7b09a4a616c86f4592d3aa3db8552dd1da03234b45dc8924

Download Submit