9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12

Resubmissions

26/03/2026, 10:42

260326-mrp4aags9x10

02/12/2024, 23:23

241202-3ddfbstqdp7

Analysis

max time kernel
9s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
02/12/2024, 23:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AmnesiaBETA.apk
Size 42.7MB
Sample241202-3ddfbstqdp
SHA256 9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12
MD5 fc1e6fb410ff9c97de08dee30e22221a
SHA1 aba1888fc0966b994c2ffb50ec5e1f4b57230d96
SHA512 9b4d67b2b3911f260549f7c35706a35adec6e6ac0a4c5013254b46d51620b79c946c6e2044c94829273e903766e2f32fdca9a76d77753c874cd4439b560c7d85
SSDEEP 786432:iMWJ5+rTcbIgVncHytCm7gN/umdotjAKOLHek/pHEer6hDC+Yfffye1M:jOQEbRGHyZ7ttjAKO7euEOfff9i
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

execution persistence

Malware Config

Signatures

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
4	ipinfo.io
5	ipinfo.io

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	beznogym.hack

beznogym.hack
1⤵
- Schedules tasks to execute at a specified time
PID:4943

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/beznogym.hack/files/profileInstalled
Size 24B
SHA256 44c6cde1ae71b8eb33215b41631d7f1b2c530b7568ed4385f4b34fcc74aded8c
MD5 3e0d4968ecd7d844701a5f831ff0432f
SHA1 f7b30c161ba2179fab6f0a4319569565c91df30d
SHA512 36ab26069779b1366cb2d2d87e9dcfe949409726fb61e60245b0cf8952747c07efb420dbb291edae706659f431750333816cf395900cc31f63ffced419499eec
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 27d2aaf6804cb26912bd7002463a7422823fbfdcd69ab88032e0f33f943696ff
MD5 4951064cae323c9187ebd08521131486
SHA1 935aa50d0be30bb216e1b1049d7dfcad8c34ea79
SHA512 20d94358bd444daf5834c24d4e577fa5b902dd7655d6c7aab694cd7b9d962d480d3d3ce4cb2495e06ca74b69b91e7080ae1a1298e77fefe4e335858f8f31fe8b
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 95460d1f6a1f61f82c97556e88a3d2a9b839c8c52afb98a8e1eb58bb58f97395
MD5 e69220589d699a81dcf0da3f4fef7954
SHA1 6441757851b3cc8c6e29c34959e798ced4051827
SHA512 dcb83c633421b1ff8a86f39d0015f663111fcfef167f3a1ce0251aa1e0ade1be8d358e44b37931a721df2ab9a75fa0cb5c062c3fce8cad1f38b37e667cab21c2
SSDEEP 6:KGXX2j9FZdrlOERX4PBX4ogLugMBX4suuK+/AvBXl8Rpj2kRSC4Ow2:KCXgzdTRmBEyPbP/0oPlP4Ow2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 e35ab33a5f56759fc2d8b0fd6ecde2a06e7058b287ae8ccd148b833b316ba100
MD5 4a6f4aa5cf4bae1cf75b9a3d5620b4ec
SHA1 fc4d27d81f90cee068e22cc562ce2bb45cd6fc7c
SHA512 0e88e1004c78fc14675a069cd722009df1b2c88eb9aac36ade03e78a6ab3717413972aee2678f53389d1fa99799ce713b5b1bc76e56265cea5abcf74dcb2179d
SSDEEP 48:l9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9a:L6+hdjnHtDRMpf8UzS6+BD8q0ExP0bgB
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 197KB
SHA256 d31eef00aaca8affebec3ff664304a1e92cd970a5d810117131c195359aecd45
MD5 30fc42668b1b2f598bfa965cbf8967a7
SHA1 aebd4ef06dfd1819f0173386632cc1f3e4b4c5fe
SHA512 0423168b60ddf766ec7eddec2a97a257878015c34afc76e90d3710a2189a752430951a3e52402d921467bb23c49bb7f5566603c77f56e1a92b235a00c1a7ee90
SSDEEP 48:w2ls/tYiIioWsUEr29lV/tY24/U1/tYVk/tYeD/tYB:otY4ntYb8tYVYtYeztYB
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads