Analysis
-
max time kernel
149s -
max time network
158s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
14/11/2024, 22:05
Static task
static1
Behavioral task
behavioral1
Sample
c622d8c06faef7a38e1332e45597982554ac52567f19fc4b057415197bc1a652.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
c622d8c06faef7a38e1332e45597982554ac52567f19fc4b057415197bc1a652.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
c622d8c06faef7a38e1332e45597982554ac52567f19fc4b057415197bc1a652.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
c622d8c06faef7a38e1332e45597982554ac52567f19fc4b057415197bc1a652.apk
-
Size
2.0MB
-
MD5
490bdf848c7c36fe086038f0d8769716
-
SHA1
ce1ff8f69ff0faa3b8d9bd9fc691300605088857
-
SHA256
c622d8c06faef7a38e1332e45597982554ac52567f19fc4b057415197bc1a652
-
SHA512
f95e9b3bdaa8a38b1b12c71b3a2122d3bb5b3b9ee3a17f90af531153871907ba3ea74a778659b3fa4a3c8119f3b48e344dffd4cdf9881716b8541854f10fa718
-
SSDEEP
49152:KEgQoHJEsFWql04hT80LqoxJhrFapbWic3v59:WE63lRhT8M9Ph+Wic3vn
Malware Config
Signatures
-
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.shootii.rooomu -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.shootii.rooomu
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD5ddafbd5108a9eb3651d72abdce31bcb8
SHA1789d9b6ba4ba05da82a6698585b722c4c46343b9
SHA2564c2f9ee46556eef307e97d90ae54accfe37ce59be54cf2bfcbb2876da1ec8644
SHA512fa9fc0c7f7eda4f70f28de86569e000e2e7edc954cfbc70e040498d31a6a6ca29485396761a0abf13d673f42cd12ce5f0ec8caae70f3939627a28f2cf90686ce
-
Filesize
8B
MD57f141fa506187c45d4b725bf061297e0
SHA1a9855d57eb53db6ad66e35f8946f8423d44e589c
SHA256685947f39c70c774d7176f071298ba16253c82336ede0edd98b25525ff2beec8
SHA512facb683ca87ee458c1a2e769eada025cf9cb9a89b3060516feb7d2c5c1cefad93b7176f4ee8082999c1933a2d80b7a28077c11ff7573130e9f8e3e367b5a9d3d
-
Filesize
1KB
MD58d7dac347876fb9353edaaccac204323
SHA114d8b02b52fd914f4e52a705bad8aa21ff4489ba
SHA25601517c2da8691eb6e0138c1b3bebd5f380811d4925a57093d37954617982b82d
SHA51242daeac48f93ce48abe36a16906b13086192eb7a76aa1a401911d375ff9dbe32ecf1d85f6522cba9ee5b172e8680acae242622889a8086f680694dcd4e76328a
-
Filesize
2KB
MD5f6396d86df673368444b14cd4b9b0b75
SHA14434b71bb304d96a3ca7d9fb38791673e6794cee
SHA256c358d623ae0ae9a5b9efacaf0046448b2d0e76d17462cb60165e1b7ec77a1739
SHA5128cc2db908257c7563f95073592da3d6ca7e4ec808e36356bb2ce3a5542dc72a2e402b98e088bf487a957ae9fc06f1d24b2a6bc303ebfce637e615ac67b4c41df