Analysis

  • max time kernel
    12s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    17-11-2024 22:11

General

  • Target

    45bc58212799b9d04d74f1d4489e1f60519f2621bb59227a193fb8cbdb142d39.apk

  • Size

    1.2MB

  • MD5

    e79b2e8b83d690fab4318043a209d48f

  • SHA1

    95403b2457d75a4d518613ebbb72db25636f43e9

  • SHA256

    45bc58212799b9d04d74f1d4489e1f60519f2621bb59227a193fb8cbdb142d39

  • SHA512

    4fa3afcc791a846b51182f180ad95861662db464790eee357cb7a9a584140b869f69cfaa34c5eb6bf2629b05a607416ce488990cc0c3cfdbd84431ec7bf94374

  • SSDEEP

    24576:RA3jGcCJgb/5+Csq+DI9ThT0NiLkpdrf1AEPKKxL9vAMDgSy6uQq:qFAgbotD8dT0NzrrO+7RDgSnTq

Malware Config

Signatures

Processes

  • com.dehodigipuhixoyi.mafuko
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4980

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    3a7b365857672152a818171fdcb43393

    SHA1

    564511f8f4833506c011e302ccb05874c18e4ecc

    SHA256

    283fc1db5e3d6845e611a00042b811096ad56beaa603f9825cea985e8e8b09a4

    SHA512

    d7460fb577c460dd63ed250a0e02bc9f0d6bddf5ea8777a82a9674ae49e2d3949fb7147f3418d318c8f067a0ce7e781fdf72d3898211132ca19c8c3906ec7b72

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    f75b1a987c1f65e72d4dd3aa6646251b

    SHA1

    89d91c0f42e7f69f5a53334e7116cbde9431f7ee

    SHA256

    d5d09ad1c912e7594085d3e6cdfb00fa4160078242403e78a1490208e94c0135

    SHA512

    4cdd74774ecde5bcb137c494f2b0631559655d2d7657d38aedc89f9878ba87a9d4614fdb0363243234df17dc49432f0c407aeeedc2f0f0a032025bab37311cef

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    22212351da8fd5792dc2481db7457caa

    SHA1

    d7b7842540016a26e0120389b2ad246930d34a30

    SHA256

    1e152a457835737ea1cc02768c8d179bed6a01e352b1bb3741cf53af5a67c721

    SHA512

    005932c2d0f4c6dfd09bffba959e99fe8a9f3d033b0a99fd38dbcad738e2fa381dbdad618313cb71959a89e1c07a9b015ac59b13d260603f798e266442eba4f6

  • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    321fb00038db30421ffe2b8719dec870

    SHA1

    1e2f4712bc1f11fbfbc3b05e4f1649bed5b6af42

    SHA256

    30c7c27caca89c477b986249a072f356ca8f420afc1d814b87ebf67582a44158

    SHA512

    9d7bc38fb56de79c5fa320990eccd39e2b8abf139cb0b84c2ff4fdf0ef8b3ea3bd7b6adb40de7a25ee3d9ce1d18c3bfe604266031d37582b07d552dc37c1f773