Analysis

  • max time kernel
    9s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    16-11-2024 22:02

General

  • Target

    2527377d4034ca4df23c7f9150bb32450f234cb12f51ee3c6705c773419aa09d.apk

  • Size

    1.2MB

  • MD5

    fe5de725df93f1336c5e1a5e0836ac49

  • SHA1

    253f55b04dbd822ecb0e3bd4f224d4f8472b7cb3

  • SHA256

    2527377d4034ca4df23c7f9150bb32450f234cb12f51ee3c6705c773419aa09d

  • SHA512

    fe4aadea466625378511cfdd1ef15698fa7bfd409adf2f7270daa27cad8cdf20cd2d1abfe0be0e01bb717e76d5f88db20a41dcf1a11015d958bed4dd2200a33b

  • SSDEEP

    24576:RA3jGcCJgb/5+Csq+DI9ThT0NiLkpdrf1AEPKKxL9vAMDgSy6uQv:qFAgbotD8dT0NzrrO+7RDgSnTv

Malware Config

Signatures

Processes

  • com.dehodigipuhixoyi.mafuko
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4972

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    48262d358b4bf3fe0982be93d92e28ce

    SHA1

    772099d4458d6edec331e2ea856ff92bfc816426

    SHA256

    3ed603e7e31056635bb6a1fc08c87f8429bea690bdf94982bc2b6d0f797ee8c4

    SHA512

    c0dc857a2070bb3cd11f1f03758021b4655b20685dd5de5f46100ab332709d26e264d6c2325dee4ae95ed1cc34bd6d44c9de83c09d6ed1ef0f90d21d4f0905f5

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    250add3a5479bba4f85b67a648c84306

    SHA1

    6b310489304fad412dfd0921d853847f7021becd

    SHA256

    8facb8821aeff06efd6018e3b0e9a394b8f816249072e4651a9a68af83d9a952

    SHA512

    e112107944a5201ed77cfeb83067165ec6caa4015ccc0779d0044468d08737f1f2818f7980a2620d4568db48db60f98fb326dc04c14abbffd14c963e1d4f03f4

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    4258cf9215be790f479869ee8a702ed4

    SHA1

    da88f2e1ab906857eec2ae5c33cdd268f7f6ba85

    SHA256

    126366a88861ed1e14121a5b34ed952af22193e2032f9e7fb91d3ff2993736cd

    SHA512

    5b9411c143da460a8c721df2415b84883999f88e1dc8decb146ebca8f6e3fef76b62b5ca23a57bf3d7becbceaccf0d1aa2dee1bb4466fa7a994cf00647591a5e

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    b01fd83f8e3f6d283fca0e6ea1bf6c15

    SHA1

    b670da3770b8f0d7d18bea58fea2dcb2f67d769e

    SHA256

    bb3362fdf1901051f7947e503f202880cf300d0c07eb2aecdf9bab76ac308bde

    SHA512

    deef66fcbb996e07305385a025214938bc0f96b96d7f32a8375454f8f4b98b92fe883ff6b552209fd10a2bee4b15a7fad9b3e85001a9d01d28c1a511fff864cb