Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    10-10-2024 14:53

General

  • Target

    last_version.apk

  • Size

    3.3MB

  • MD5

    487b07435cd8d69f316e824ebe46f471

  • SHA1

    f8736afa75cd806914637290ed7be5880ad55896

  • SHA256

    3c01311c1d247c40b42b17defec706c1b7cefb7f2ff04cc9b39f311d77cbebb1

  • SHA512

    1ee42838b1e45a0f8df3b2b4aaaf76c5ed458fa00f640bc4937fcfe2cc00482d2b058a8eb78aa96a6045d8ec2939dde933232717a36cc402a0ea64e1b1e0fdcd

  • SSDEEP

    98304:QnloCJiJTqCLt+59bqGal73rvolXBxlc8fiZXe:QnriBqCxG9SAlFJqZO

Malware Config

Extracted

Family

hook

C2

https://ws.fasoqloper.shop

AES_key

Signatures

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4964

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    94175ceccd1fb5f1883642d5159504ea

    SHA1

    bb1e0fb186a038e9aa13535fe4a8c66ee3f43756

    SHA256

    57cfa1d7ddc0011a977857c4ce06a05daa3a4ee85e7be2f33df997174269ad37

    SHA512

    f918f7106e2117a26d57eb718f680e9fda7897331344504c9b328987ec97d5dd24aba8283e6323c465a0f257d793f1b875c3b01a3dbbba8ae56fdd65426f68cd

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    101546dfe236c4c1d494003813a5b23b

    SHA1

    dc8e4123b0db9bcfdae1c75af25a26f1b626b317

    SHA256

    c579cf7952fd56c5fd30935a71e76ac04a6bf0906239091b43fcad1b17afa14c

    SHA512

    9718cc93f5f562745262f33354dfd68ecccf144820347bded73cab1f688207dd1e690bcad9e8510b2b0ed76dc5e325d0221a4d00241aa3cb3582e77287018916

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    6031b61c2e95199a31aabe1b22a6c2a0

    SHA1

    e4fa32d3a11166d2bc8d0ba108f7453c66a883d6

    SHA256

    a7a2939dc5030b354958b9a8a4e18b687d0aa20959d39998f5d0c054fd370699

    SHA512

    5f0277c879e94bcb421d74a93515c86c5f84fe41110d5c573673b17705c5cd4a0593db772cb00812fc65d673a17f853b15a3d33a7e04be196a20b0dd1c153029

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    e4a3f6917449cce805c7dc97b8168224

    SHA1

    26ece13a78a1b36d3ff72373385e4ddbb9e41b6f

    SHA256

    7e3a8115d745cc99c2c39517677050dcf9444273834acadd249ea953d8d7d66e

    SHA512

    ecacf2d82c17f22b063d116a64f88d26084ea69714a121137fbb1c8a703392c9f56827f8cc7de65cdfe20d70b0e0c5d59701296961d4252527a8246a116981a0