9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12

Resubmissions

26/03/2026, 10:42

260326-mrp4aags9x10

02/12/2024, 23:23

241202-3ddfbstqdp7

Analysis

max time kernel
9s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02/12/2024, 23:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AmnesiaBETA.apk
Size 42.7MB
Sample241202-3ddfbstqdp
SHA256 9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12
MD5 fc1e6fb410ff9c97de08dee30e22221a
SHA1 aba1888fc0966b994c2ffb50ec5e1f4b57230d96
SHA512 9b4d67b2b3911f260549f7c35706a35adec6e6ac0a4c5013254b46d51620b79c946c6e2044c94829273e903766e2f32fdca9a76d77753c874cd4439b560c7d85
SSDEEP 786432:iMWJ5+rTcbIgVncHytCm7gN/umdotjAKOLHek/pHEer6hDC+Yfffye1M:jOQEbRGHyZ7ttjAKO7euEOfff9i
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

execution persistence

Malware Config

Signatures

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
6	ipinfo.io
7	ipinfo.io

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	beznogym.hack

beznogym.hack
1⤵
- Schedules tasks to execute at a specified time
PID:4251

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/beznogym.hack/files/profileInstalled
Size 24B
SHA256 78dc07fed2e9884cba8e53b93c0d433042e7e0fa6ea26288e3209717bc8aa0e8
MD5 6a354629d4f93bd53e812415df4eadf5
SHA1 82a66f921825fa5375c00bd4a69e1966cb8abbb5
SHA512 d30e4307e3141635af64cbe4c3dfe58f5313426ce40efd63d1c5d0511d33fdf93d76bd4e5931a701e75925cff1197287a3e3aa602cb8db20293a5f3c2b1fdd57
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 c8f3e09c67f4bede350c71dea535572bfb2f4e7fde29911c9149e38ebbc5e3f1
MD5 7b3ee7487a3b927ac8a9d837d9bc70cf
SHA1 0499c2b1f10a9ede31b0d2b18dc49445a1a1c5fd
SHA512 9a2bd2cf68b54d53bed28389724923af3bee5631672d8132e7263e283ae37a59568bbf52bcc5955ac81a5d5ea393daa228223b1ac4a25b3cc87127670d7b83f5
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 48eb9dd82885f9c5d085aa3a354e37522aa79b894a1c625c163cba10c1c560cd
MD5 ee836d0b74cdb790aff5707d239492e1
SHA1 8c6733e5cd2f7ac3000b38f687e17732683cbd90
SHA512 e742da3935e4ca59967ba8c20f9fda7bcb56f9455e70a40890b67dcb52f3df95a3caafdc68cdf8a09d105d9975105847768882237275d28c64766e00c8fae8bc
SSDEEP 6:KYIuEJ9FZdrlOERX4PBX4ogLugMBX4suuK+/M2lll/yjF3FyjFXVOw2:KYLCzdTRmBEyPbP/b/l/GolOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 1d6525af418c904e632bf0e970331a4c7b9929df47af96a0d6faf18f934ff163
MD5 dd139095f3514fd676802848ab455e20
SHA1 ac2273a4106b6043ede0d60fc9aadf345cc65153
SHA512 b03ab9fcf9ab2fd24ba090b26b3a24f43dea1c1989fa3b0593ec8d8c4f8a19c635fe41d18969c03dd028619aa8c68daae23f429739589ae29902fda01f256b78
SSDEEP 48:j9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9Q:B6+hdjnHtDRMpf8UzS6+BD8q0ExP/J9F
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 221KB
SHA256 37748c323760e67815316df596d6412e5d98c4f7f87a4dba3a1e5fa72dea08a2
MD5 3f39e783d692603d0af9db2247113e1c
SHA1 790053234973053e9a62e9b9787ef3f6902bc1df
SHA512 10c1eb18c85ad603f10782a50fd69fdaaf36fd5c41f609038492e4d54b8ffaef600671af369d9153cb8b27708850611648067f87b361b65ab7e92df9f1ebef53
SSDEEP 48:JCtYjjDrbjCtYdiNCtY0CCtYGhibCtYyBaT:JCtYjjDrPCtYWCtY0CCtYAibCtYIo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads