AmnesiaBETA[.]apk | Triage™

General

Target
AmnesiaBETA.apk
Size 42.7MB
Sample241202-3ddfbstqdp
SHA256 9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12
MD5 fc1e6fb410ff9c97de08dee30e22221a
SHA1 aba1888fc0966b994c2ffb50ec5e1f4b57230d96
SHA512 9b4d67b2b3911f260549f7c35706a35adec6e6ac0a4c5013254b46d51620b79c946c6e2044c94829273e903766e2f32fdca9a76d77753c874cd4439b560c7d85
SSDEEP 786432:iMWJ5+rTcbIgVncHytCm7gN/umdotjAKOLHek/pHEer6hDC+Yfffye1M:jOQEbRGHyZ7ttjAKO7euEOfff9i
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

File Explorer

AmnesiaBETA.apk

.apk .ps1 42.7MB
Build.apk

.apk .ps1 10.1MB

AmnesiaBETA.apk

SHA256 9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12
MD5 fc1e6fb410ff9c97de08dee30e22221a
SHA1 aba1888fc0966b994c2ffb50ec5e1f4b57230d96
SHA512 9b4d67b2b3911f260549f7c35706a35adec6e6ac0a4c5013254b46d51620b79c946c6e2044c94829273e903766e2f32fdca9a76d77753c874cd4439b560c7d85
SSDEEP 786432:iMWJ5+rTcbIgVncHytCm7gN/umdotjAKOLHek/pHEer6hDC+Yfffye1M:jOQEbRGHyZ7ttjAKO7euEOfff9i
MD5 SHA1 SHA512 SSDEEP

android polyglot

beznogym.hack

Build.apk

SHA256 2008b7e4c6d04d11e51dfd75d466365d1aaf66ca4c50e60c53ed9b0a514ef286
MD5 7476eabbf756bc6eff06f8dac6f26bdf
SHA1 3d7b362bf9a9afdb5824900a50d25791efba97ec
SHA512 ebfbc329f1a9e5d68e2a5e54e1105eb66f348fa1c1e2669f02e76fa8002c76ceb1bf8601a1f0d3a4cb912b66cc99293a7205b090800c92d793220f7e9982bc2d
SSDEEP 196608:fOzo8DogfSlt0XjFfeSZWytSGa+bW8KZs5tvKNKu6W8uqOvbu/uXWdwXks1woZDW:fYXkgfGt2QSZrfKyjKNK4llTcuXiMZDW
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:arm arch:x64 arch:arm64 polyglot

com.example.myapp

com.example.myapp.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.example.myapp.BootReceiver

android.intent.action.BOOT_COMPLETED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

AmnesiaBETA.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

beznogym.hack.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

AmnesiaBETA.apk

beznogym.hack.MainActivity

androidx.compose.ui.tooling.PreviewActivity

androidx.activity.ComponentActivity

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Build.apk

com.example.myapp.MainActivity

androidx.compose.ui.tooling.PreviewActivity

androidx.activity.ComponentActivity

com.example.myapp.MyBackgroundService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.example.myapp.AdminReceiver

com.example.myapp.BootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

AmnesiaBETA.apk

beznogym.hack.MainActivity

androidx.compose.ui.tooling.PreviewActivity

androidx.activity.ComponentActivity

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Build.apk

com.example.myapp.MainActivity

androidx.compose.ui.tooling.PreviewActivity

androidx.activity.ComponentActivity

com.example.myapp.MyBackgroundService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.example.myapp.AdminReceiver

com.example.myapp.BootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

AmnesiaBETA.apk