Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    18-12-2024 22:06

General

  • Target

    44e38927af75b9d744ed39b8968945721b2b18d09b08e8dcffb9725b7c699a6c.apk

  • Size

    278KB

  • MD5

    c333b8d25cfbabe35178a6ad2c7fecea

  • SHA1

    9e90e8a069240b4b680714ba0516dfc7defef4f6

  • SHA256

    44e38927af75b9d744ed39b8968945721b2b18d09b08e8dcffb9725b7c699a6c

  • SHA512

    5474ea9517183685bedd0205e211e347587becfd0633b9040ad48f1fde808cf5f35d225739f971d4ed566378e40e5fc1bc38aa3e10871967d9c0a36e68ea25fa

  • SSDEEP

    6144:/3ektBoOqon0DMyZWGrwHYrOBwwsAf669DPJVEw:bBfq8SfWZH0OaZA7Vew

Malware Config

Signatures

Processes

  • sewinv.fu.aaqdl.vlyw
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Reads the content of the MMS message.
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4328

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/sewinv.fu.aaqdl.vlyw/files/b

    Filesize

    492KB

    MD5

    7e1b639338295aaf9149d4d5cc496ed6

    SHA1

    d89b93d56bf924551e6b421234179fd4fec859f9

    SHA256

    02fcb596708bde924cdf258495deeb6cdb5a8016d01eff81f1b3ae449c2465fa

    SHA512

    699ae0b027bce12865a1db5890ab38f79b22fa4b64e4739316e50e0f73e0c399ab2d4a2bc939b66b53796b821326e66822ef9102c3bce9b8e3854cabb1fa356f