Overview
overview
10Static
static
10e3b7840fa0...18.apk
android-9-x86
8e3b7840fa0...18.apk
android-11-x64
8LenovoSafeBox.apk
android-9-x86
7LenovoSafeBox.apk
android-10-x64
7LenovoSafeBox.apk
android-11-x64
7LenovoSafe...30.apk
android-9-x86
7LenovoSafe...30.apk
android-10-x64
6LenovoSafe...30.apk
android-11-x64
6Analysis
-
max time kernel
43s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
16/09/2024, 01:02
Behavioral task
behavioral1
Sample
e3b7840fa024f0568f612fdc9cc16291_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
e3b7840fa024f0568f612fdc9cc16291_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
LenovoSafeBox.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
LenovoSafeBox.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
LenovoSafeBox.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
LenovoSafeWidget130.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral7
Sample
LenovoSafeWidget130.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral8
Sample
LenovoSafeWidget130.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
LenovoSafeBox.apk
-
Size
904KB
-
MD5
f8766f793e9f762ffef225a92a78b2d8
-
SHA1
cbdff0b9d9e26cde04acd12ce3c5ee34e306acc7
-
SHA256
4ed2eea5a3ef19bb16dd8d5fc2da58fa2c72144b2e53036b2895bdf59f0edb8e
-
SHA512
adb212572e6c6822ecb46326a706d1770f1aaaee6b6cbd23a3f75b3cf4091019c39974c217630a584acc466088cc7faac0d662364503b337b8264103faaeaa6b
-
SSDEEP
24576:xetMiI2b4apsiko9W8C/2KgNHnHjkAsV7kDn5c2trp:RiD5pUoW8e3gNHDkPVoDCMrp
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.lenovo.safebox -
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.lenovo.safebox -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.lenovo.safebox
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD54e7d39daa7a3ebcd023d5982fe959d6f
SHA13e299bf3421be9fd74ddbd19b4de930cc784bfae
SHA256b52433523053e1e635a5122133385660029a54381f020a0c625eae003d0161ed
SHA512d7d4bef11513c19475758ecaf21c00164f22e6746c2166b41c26680056b82d5a5d1d3fe1704586f3822b9371c6400ec7da827845f6c4385268545c1b23449708