Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    24-10-2024 22:11

General

  • Target

    a5bfbde8c7dccc9557a3299c0f62d77370caf66eba3cb338ddb1e7cee3cef02d.apk

  • Size

    3.9MB

  • MD5

    31cdb66fa4f4c20bbcd37356dcecce25

  • SHA1

    afacf76c670118c85936636d38779ff9c65bb755

  • SHA256

    a5bfbde8c7dccc9557a3299c0f62d77370caf66eba3cb338ddb1e7cee3cef02d

  • SHA512

    78b8fed0d962464cbacc18401e831c72c5926b0e768bca98b0cc4c5104af3598b1fd2ecd2bb4c5505710653a8a9c17789e0377c446acd7506f2bc2779db59478

  • SSDEEP

    98304:8g9RRqaHrTIbUIyM0g+2ZCj4BWSG/JjMUE71Kv9B2Q+/mg:8g9RoaH3Ib1B0x2ZkZja7cBT+3

Malware Config

Extracted

Family

hook

C2

https://ws.fastmano.shop

AES_key

Signatures

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4633

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    4331b2f987814be7a5f2c1c130a407e5

    SHA1

    3a7624e442ae92f073168bfd1fa7217a4c8a66af

    SHA256

    c2447dc458198c20d204f856c6f8042ab4e33db876ff7a17198dbb4dde3b5c01

    SHA512

    d1d79df63020555f5b3a932056646761b0af8c0aaf2171358718ef088573c0abb4162213601c16966c379dafc6a41b25342d388a88b468f494f9e8bd9a263760

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    ac3fd90c3002618b38e094f59727fcc3

    SHA1

    a15a476df8a4c8fbc7ded487ec81d9e666a3f533

    SHA256

    c8b58a2047896a7089a91a3f7cd4eb58a179cb00d0aab1246e46c84f9b9a6fc1

    SHA512

    c9be51e3c3c4b6001537b92b25c4c647fb4f97e8bfcba3a493baa8bf536965deab2c161fcd0ab7c748412bf790fb8cec88fdd0c9515c1dc7ab451b76e49d851d

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    eca0c7d1b391b4328d0ce1a4b2dc69ce

    SHA1

    175c88068f517b0e128bc5ef9b236bb4ff6c9d5b

    SHA256

    dd6c64319597b617867d85170523f9da857c84b819c44b256a8893c3f8f29c0e

    SHA512

    c2551a0f829253fde85344cd30f5620db63549f55c9ed43206c3696fd634413495eccc67f2afcdffc0968141bb0be8bf46a473b6182c71e829692c6c4bc4df8e

  • /data/user/0/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    545c6d7db5afbdcb16a81a71c06b5654

    SHA1

    62690c14e1feef321d33552e3c5de20d70bee3cc

    SHA256

    a585d2997a16d0b8555c4d49ec1bd9f163671fd640a265d4d71836a0384f22f7

    SHA512

    2534b277d95ee40e6f339dc668e7f17898021d0e960fa55e3d0ed29c8cf29a77e976856f937aa3211bf64604f2b99dd6e3f4fbb6af3aa1993100229991bb6019