Analysis
-
max time kernel
124s -
max time network
175s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
28-07-2024 22:00
General
-
Target
liveWallpaperPlugin.apk
-
Size
162KB
-
MD5
91d33062e74043bb0bd9d5f66b343f3e
-
SHA1
aa3fab31cf6d5bc7fb1c012ada2b77ffe242a7c0
-
SHA256
4c3720917d9920cdec450cc85fe2fe3db39bc48cff4fea270914b475fc79f08a
-
SHA512
be5eb5cdab9e3348f3228fee40172b351a07d2d39ddd9d085593e3d78c13259be62425b4993a40696542902c452f7213a7b92410baf06192051640607389b80c
-
SSDEEP
3072:QV8ZyGg6GYtzqWn1Vmkv7YVQi5cRVl/51SGHHkmjVw:w8ZLGYtrv7O09bSGHHkYw
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.tencent.qqlive.wallpaper1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
235B
MD5932f29b27736717a7083abbb8053bb30
SHA19db2fca99efe8eb60afdbfcf0576508cd74464db
SHA2567957ca625a6e00c020e9b45495570055e836946641e335237edb942325f62841
SHA512a2d5510532c083b0ef5c8c8732466a70907329a5b9373028c9a89fa6a0e31986d09b375863e78582aaf4a02494aa76b55a38c229928e24a35a4ede29d45b8012
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
52KB
MD531972a5ab8ad3812e6c03655bd6268f0
SHA19d53ae447de8441564c2fdddc1897c0d5972e23b
SHA2566a379cb563814fe62202b2d5c000e22d291e6e69fd281405d367a0537c2f6783
SHA5125ad3e9212ddd95a8399ad86739721e8452a63a3a0b8ba09d60829d7cd59a4100460076136d981f7130190aa96a698c04af0cba77cba6d93a2e581ea23bf27bfc
-
Filesize
512B
MD5303aec2dffd33e2007b257cdfcc2e15b
SHA1edca34fac0cfdb3507d325151185bcdb8b013eb8
SHA25682c66e0e1d16a081bbf00d19b54d55fd3c448826f1759eb4849504813f2c5533
SHA512e1ec52520e82d5869637335ca33422e3439955e0324e2841efbd5143949eb5b8242af6b2288ba576b1bf3f0961a25fa8a999b7ed4de33bf6baa3903b9bd11bb0
-
Filesize
8KB
MD595b8c600c810bf04dc83af3c6ddcee9b
SHA13a55c996c28bf672ac5dc79960e072fd9f51ce74
SHA256868b454ab2c1e0acc2072ae5e920a7d1f2a17fe16742a42e28b37bb629f38777
SHA512c0a22fc3434a04ec6d04f4c5729dcd1635c9a867f0d6c922e7d27e7faced604c444e6219845240539030adffe43b411045f0b17bf1d27bc46b1323269052c225
-
Filesize
8KB
MD5c68198fd77ca53b3f176f62d1219bc82
SHA1f11c8bb435875f18902dfe657c616cb9a0ec7435
SHA2567314b99ad05953c766c8289c709b036dd9bcf3b76b45878ee4bb51b2792c3882
SHA512db0818bc1ab284397f9eadea40435453b720aa9a55e0317465c6ca2cbf70e99f561ca624aa550a4e1e69e6ab1cabf50ec43e7b6e1c1b31b5bad4a9c3a9d898fc
-
Filesize
8KB
MD5b8c70f5da21261968956ffaf084e5d14
SHA1362bd04b6adc1e26681e8744f8541beb758449c2
SHA2563dca4eff89d6780ab8b6de0eb85716327a5a2a6dc0bde2a9fba7c2a58ca102b9
SHA512fb0495cffce40ab04d2401df89e4ddd611eb416ba65145ad3e3ef66bd1386121327b6ffe2c272fa6049f05e00de582519a3c1d001f28c33658c03ced6293a4aa
-
Filesize
8KB
MD5c565341bb6324bff98e134833c7dfcda
SHA1fa9de8c384a24fa1b2e8e1186884790088eed804
SHA2567871800b09740a4bb55756c3ec9119b4e4b8d9e22e3e7fbf0c624036e83c60e3
SHA512225c5989f755192988faa7ac44d49e9305daad8e0a985c0f353b52c1fdf49a4afd69e99b15dd9b0fade63c0bb712fcce9486bca9ec6013bc27e0b22222d42429