cd918a81a7dd88e05d4af6ba65603e52d1c8d9c7ff7e261b9602a93540c83284

Analysis

max time kernel
7s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16/09/2024, 01:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LenovoSafeWidget130.apk
Size

111KB
MD5

176d77dee1450436fd6934f789812b4a
SHA1

e5377fcdb8060c55ce06d6bfef69c65c902cb5df
SHA256

4e951be730b798e08abe50ae8e9ed54e610c1307c7b1174193622d1500abf091
SHA512

e6324c42dfcb272ae468e2f659b00d39b0286baffb3356d4b059b030b38baafa953b40bc9ab27504cc0eb556f65a4e673e4cb5b93b7e069efbf444bdd3688f47
SSDEEP

1536:lb7+/wIh+9dRONyFNWNsVDL0/1U/i/w1kp7xbfZfWJG6WI/k5x5NuVps5fygfu4:4/QRpbbDLlowofZfWJ1/k3Es5f44

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lenovo.safecenterwidget

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.lenovo.safecenterwidget

com.lenovo.safecenterwidget
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4257

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.lenovo.safecenterwidget/files/lenovo_reaper.db5

Filesize
8KB

MD5
63f403ef7d608b0b9fc667de3abfe4dc

SHA1
3234819b295d787255601db83b14b38d65fd708f

SHA256
186d04b3c6161d38c6cdd06e788ecac20bd2e5f82995cc777ce293331ee8bfa7

SHA512
d56d471e17455f8708f9e9f27b0403bc33770747ab14ecf1310d37b8caeed80038c0d2473c8e9bdb85c6885b726e25dd1fb0060b17f1ea59c3a85d1ab7af3322

Download Submit