Analysis

  • max time kernel
    23s
  • max time network
    154s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    20/10/2024, 02:45

General

  • Target
    qqphonebook.apk
  • Size 3.7MB
  • Sample241020-c87pjsvbjd
  • SHA256 da2105ef9cf91324e131e71111580d196556bf23b663d4e2d51c2bb0ee957721
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Reads the contacts stored on the device. 1 TTPs 3 IoCs
  • Reads the content of the call log. 1 TTPs 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.tencent.qqphonebook
    1⤵
    • Reads the contacts stored on the device.
    • Reads the content of the call log.
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4275

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        micromsg.db

        • Path /data/data/com.tencent.qqphonebook/databases/micromsg.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        micromsg.db-journal

        • Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-journal
        • Size 512B
        • SHA256 f356f7835e8a31de4dfcd383c9c679155e22d69fccd9a359ebff463f451305a4
        • MD5 SHA1 SHA512

        micromsg.db-shm

        • Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        micromsg.db-wal

        • Path /data/data/com.tencent.qqphonebook/databases/micromsg.db-wal
        • Size 68KB
        • SHA256 eb4a5282d1d45eb4295362cecbd6048343f980632a0bd03f78a9a619fe4d1f55
        • MD5 SHA1 SHA512 SSDEEP

        nldb.sdb

        • Path /data/data/com.tencent.qqphonebook/files/nldb.sdb
        • Size 131KB
        • SHA256 1834321418fa1941cfa7108b99fc2651244a4716bbc6cf8aef9fd8f4e8387201
        • MD5 SHA1 SHA512 SSDEEP

        rule_store.sys

        • Path /data/data/com.tencent.qqphonebook/files/rule_store.sys
        • Size 39KB
        • SHA256 03b469c747a9095af4aae0f5c72312b80d6d6a67c9326e2e3bed1e9f42f0cbc6
        • MD5 SHA1 SHA512 SSDEEP