b701df66f1e7e5d6d618ab215194f87fc706c7d044971b923cfc7479af272e1f

Analysis

max time kernel
0s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
27/09/2024, 13:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

origin.apk
Size

53.2MB
MD5

a33b059e06e4473bc7dff9b1bb58afc7
SHA1

960b5135491a15eb9884df4c76ea6e2608c4606e
SHA256

1e7baddda58e1c6f22b3d5b61367e5e52f5b3c71f17036a8276191bb304028db
SHA512

415bed9102aec500fc0f5c711053ecd9c9f0d705b0f421e078fbafa85bee68c6b64f1779b4d58ee5768c2d20851119bbf02c843c8c078cb22fb34438d200faff
SSDEEP

786432:PJihEsB8ghxHd6B33kiQewdw0XHpEyBKVtMandqqvMYUBZ8LmZgPK61EQjCN:cpQ4eODHpEjsqqqvMYUbqUB

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	io.github.pyoncord.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	io.github.pyoncord.app

io.github.pyoncord.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4844

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/io.github.pyoncord.app/files/INSTALLATION

Filesize
36B

MD5
dad8e9ee059f6bacafc647b545f678e7

SHA1
fc5357501eed0bf117c1c3ccfa96f0549bf5ea09

SHA256
8c92ffb8ea6b9a0187ff2258a50ed18e88cd7763dbd9ea6e992d892557f6ee9e

SHA512
5a0f6599b6df880acfc569ac611495caf724d9f6e03a22d0be07c49b90103537927b332f3406f23a7cb5c9957d65dd070dee3c64ed24a53865cd0d1bd6e9f0b2

Download Submit
/data/data/io.github.pyoncord.app/files/PersistedInstallation852048770432491565tmp

Filesize
90B

MD5
46868106dcf4fe2135428cc29229ed3e

SHA1
1a59a739be2915b1fcb2dbd47b60bbc498d9353b

SHA256
6bafd168fe9faec0a6c895a20bcdec0cb557b958be45ea65af6b7e51c152bad0

SHA512
c2aad557b3c29c41818981484796c4c11a41501f17c1411ccccf8391c7b6fd82f099eb25e39920003d8f648fac9c20241a443a8094af8249f0ea06af521aae6d

Download Submit
/data/data/io.github.pyoncord.app/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/io.github.pyoncord.app/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
110929ffa1c098de47a7e7d816ffa416

SHA1
8065ee86c0beeb657469677868fb1e0225849a2f

SHA256
59b65ff427e81a2cb935fa03a9f07d0e0b2373d6d05a7735e569e67f15e12be0

SHA512
9688758010d62635955479ac26763ca1af44df53a972c31006c25b0db50019ce8f6431040ea0e1500f726187ee698171070555fd589cb096db33d78ea308587e

Download Submit
/data/data/io.github.pyoncord.app/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
ffef27aca4fac04e3e89fc1735da729e

SHA1
c306d4fc6fab2a15fd167c35d1cb7d87d3e7a795

SHA256
65f8285adfac70d0ea62da6c9ae5a2b61d398ac546f331400571da6e12ef78fe

SHA512
5703692ac6ddcc8ba2e59ca7ff0983c73b4f506dca65951d0cc340324084696620dc8f6e21bdaf58676c21f753702d09006d87f8f30d30ca0a2cf21ec8249ce1

Download Submit