9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12

Resubmissions

26/03/2026, 10:42

260326-mrp4aags9x10

02/12/2024, 23:23

241202-3ddfbstqdp7

Analysis

max time kernel
9s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
02/12/2024, 23:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AmnesiaBETA.apk
Size 42.7MB
Sample241202-3ddfbstqdp
SHA256 9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12
MD5 fc1e6fb410ff9c97de08dee30e22221a
SHA1 aba1888fc0966b994c2ffb50ec5e1f4b57230d96
SHA512 9b4d67b2b3911f260549f7c35706a35adec6e6ac0a4c5013254b46d51620b79c946c6e2044c94829273e903766e2f32fdca9a76d77753c874cd4439b560c7d85
SSDEEP 786432:iMWJ5+rTcbIgVncHytCm7gN/umdotjAKOLHek/pHEer6hDC+Yfffye1M:jOQEbRGHyZ7ttjAKO7euEOfff9i
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

execution persistence

Malware Config

Signatures

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
21	ipinfo.io
22	ipinfo.io

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	beznogym.hack

beznogym.hack
1⤵
- Schedules tasks to execute at a specified time
PID:4487

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 517eab62a0fa5a1b98873e3870514fdd3d230e6da8880356ca9979b541036658
MD5 fd34abddeb5ed052560425ed22fe4144
SHA1 da0335249d02ef1b61160548017421520596d483
SHA512 a65954c7e3761a2cb6c8c8bb9bc42e182766f47582d4e74d5570759c05d5b4f7b5778fa30743dabedef3e3b29322b43833cbb5938ab78e68bf580a21e69c0011
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 1295c8ea0b66786bcadb83ef20ba70da3cdcf7ec52ef10e6dc47a1b42711a379
MD5 6ebd00c891f80264bc5891e3b094ab62
SHA1 abf37687b0d60c7ea4929fadd3504dd30bdd3ab8
SHA512 04d56875cf307b79899fd7c03e6be0c6b2197c84e4ba4950990108d3e8d63dbe8f163d4bb30275d12e79e87bebb42cff8de38e378e6b834541de57f8823621e5
SSDEEP 12:KODgneIzdeWRmBEyPbP/oDqatQDs+2DQgVOw2:KCgndzKGSP/oDzR2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 40b44aa3018a52caf5c9eb073ff85845274af25a4f3d738c7921ee6b60f4e9b9
MD5 21d5d043ed959fa773ff035b32eb8f4b
SHA1 0b94078d344b0c223fd76abf404983182ebc7fa8
SHA512 7384a27204d92f94d995c07a02f653d4a8bc76d12f4c9609d2a55bb4a53ce715dce338d85b5bcff87b0cd35035d58760f297a2a05f908129a9bb7dd1ceb716c4
SSDEEP 96:lS6+hdjnHtDRMpf8UzS6+BD8q0ExPgDhykVhypk+ltI/6uTWNKyQh:AdjnHt9Mpf8UzS6+BD8q0E5ghh
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/beznogym.hack/no_backup/androidx.work.workdb-wal
Size 221KB
SHA256 00ef94fba5c750dfb7c75782cf6692c280fd1aae291758b21f60090d315617bb
MD5 ca42d8012d17a62de11f26671ae9e3fc
SHA1 2c6f45d79c6d10da67fc74043d8b08a696d93593
SHA512 81e66baeec705b4b52020b2dfa64ed5de2eea933b555f50a37dd1b581c30f0b50bde736f8d018524b152db6a0268dbe5a82cf63c077a6a09c02e05d6dc6fa938
SSDEEP 96:Q2+tYZj//p8QI5+aFe+tYaPHpaOAT+tYQC6+tYo4W0nWr+tYg1TnkYsMugo:stYPaXtYaPJAatYhtYH5btYg1Fugo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads