Overview
overview
10Static
static
10Pegasus.zip
windows7-x64
1Pegasus.zip
windows10-2004-x64
1Pegasus/14...8e.apk
android-9-x86
LenovoSafeBox455.apk
android-9-x86
1LenovoSafeBox455.apk
android-10-x64
1LenovoSafeBox455.apk
android-11-x64
1LenovoSafe...15.apk
android-9-x86
7LenovoSafe...15.apk
android-10-x64
6LenovoSafe...15.apk
android-11-x64
1Pegasus/53...f74f5f
windows7-x64
1Pegasus/53...f74f5f
windows10-2004-x64
1Pegasus/bd...2a.apk
android-9-x86
Pegasus/bd...2a.apk
android-10-x64
Pegasus/bd...2a.apk
android-11-x64
Pegasus/cc...c1.apk
android-9-x86
Pegasus/cc...c1.apk
android-10-x64
Pegasus/cc...c1.apk
android-11-x64
Pegasus/d2...20.apk
android-9-x86
Analysis
-
max time kernel
7s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
27/01/2025, 06:04
Behavioral task
behavioral1
Sample
Pegasus.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Pegasus.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Pegasus/144778790d4a43a1d93dff6b660a6acb3a6d37a19e6a6f0a6bf1ef47e919648e.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
LenovoSafeBox455.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
LenovoSafeBox455.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
LenovoSafeBox455.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
LenovoSafeWidget115.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral8
Sample
LenovoSafeWidget115.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral9
Sample
LenovoSafeWidget115.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral10
Sample
Pegasus/530b4f4d139f3ef987d661b2a9f74f5f
Resource
win7-20241010-en
Behavioral task
behavioral11
Sample
Pegasus/530b4f4d139f3ef987d661b2a9f74f5f
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral13
Sample
Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral14
Sample
Pegasus/bd8cda80aaee3e4a17e9967a1c062ac5c8e4aefd7eaa3362f54044c2c94db52a.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral15
Sample
Pegasus/cc9517aafb58279091ac17533293edc1.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral16
Sample
Pegasus/cc9517aafb58279091ac17533293edc1.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral17
Sample
Pegasus/cc9517aafb58279091ac17533293edc1.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral18
Sample
Pegasus/d257cfde7599f4e20ee08a62053e6b3b936c87d373e6805f0e0c65f1d39ec320.apk
Resource
android-x86-arm-20240910-en
General
-
Target
LenovoSafeWidget115.apk
-
Size
123KB
-
MD5
12c89f415f86784edddeb18072f5113f
-
SHA1
135c18ae3ca1878895391abe5bd69f858b73fb8c
-
SHA256
6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
-
SHA512
8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
-
SSDEEP
3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz
Malware Config
Signatures
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.lenovo.safecenterwidget -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.lenovo.safecenterwidget
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD52f6bc457df74bbd743eae82a3c727a9e
SHA1c48f7fd07eabd6eeb2366cb9f2b16a41096bbfe6
SHA256044dfac1b1205d86284b2977a6ed7d0ce0f221cbc4566aae43d907b9ea7fe569
SHA5125392ef5a59a1de4aded673c9e107a295b91142310e82123ef796728bac6e802e4475fbfd1b50c963704e53969c3156e0f07d775b4af55e7576871e3dede2eb5e