pegasus | cdc4645f8705dd614528ac63a6cecce5b35dc931ce15d6c5421c91b47cb860e6

Analysis

max time kernel
113s
max time network
150s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
22/03/2025, 12:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5.apk
Size

257KB
MD5

7c3ad8fec33465fed6563bbfabb5b13d
SHA1

e5920f3723e62e1850157f09baf556006bf80f74
SHA256

ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5
SHA512

75da7c118879d9430fb13c5a51d76e1278f0c1474d5cc25c4b9684b7d8c0f93b2e44584eee0f8b0d12016bc1efad367b45ff9ca5609853ae345b6d802ff63d10
SSDEEP

6144:OiJF1SCwcTjQGPihLcfUmu9XuS0nbkDIyTkRJ0P1d41RiFV1iFuU:OqF1VHzqLcfIJ4bqIeP9d4jkKFuU

Score

10^/10

pegasus collection discovery persistence stealer trojan

Malware Config

Signatures

Pegasus
Pegasus is a commercial Android spyware first seen in 2016.
stealer trojan pegasus
Pegasus family
pegasus

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/contacts	com.network.android

Reads the content of the browser bookmarks. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://browser/bookmarks	com.network.android

Reads the content of the call log. 1 TTPs 1 IoCs

collection

Call Log

T1636.002

description	ioc	Process
URI accessed for read	content://call_log/calls	com.network.android

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.network.android

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.network.android

com.network.android
1⤵
- Reads the contacts stored on the device.
- Reads the content of the browser bookmarks.
- Reads the content of the call log.
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5078

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Protected User Data

T1636

Call Log

T1636.002

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.network.android/databases/NetworkManagerData.db

Filesize
16KB

MD5
2839279a9a853a40909c1dca03d2337f

SHA1
03baa059604d878e22917202fd90fb5f7de635ce

SHA256
97c1943ed1e984e7af5d8c490197075b8e43af11568663abee7c61f4e2caf0d8

SHA512
bc63d7854eee474c97373a207031f7358bcb8330dcbab015cf2515e21728c0d0737fd3e452e3d4c4be2c52ff00a86a472592c540e374d3293141c425b276de56

Download Submit
/data/data/com.network.android/databases/NetworkManagerData.db-journal

Filesize
8KB

MD5
9ee4acf82c084f6335d072646eeb0266

SHA1
c4afb143dbc94ff2c95d64176de88fb79775d175

SHA256
d52b859f9e4e5857aa7b01b2e02a89e748302aa39dda9052e610dd376a4bad7c

SHA512
3d1ca8fe5100108f95d276de9293201eebba2c914b8810e3d3601fb2643bca5e8291148b7fd1030baf59d2f54981c30c17c589cc7287c10f073412c2ec68116a

Download Submit
/data/data/com.network.android/databases/NetworkManagerData.db-journal

Filesize
8KB

MD5
1193631b1123e9f2f121e5f75b9995e9

SHA1
a0ad5feaf561449640018d3511f4c34af41a78f0

SHA256
2fb0b087d6f0ecaa582fbf5ee9c54fea5e4ec889258b940fa543aa9f48f50a8e

SHA512
642aca1c0ff06ce7a73635275c83b4329c3e1a751941c50915b0706a0cce424f735d01e6c40efcb654caf2c7e6dcf0ea2c9e52cab9131e6e130864bd10a7ec5d

Download Submit
/data/data/com.network.android/databases/NetworkManagerData.db-journal

Filesize
512B

MD5
971c440325835da415c461cbda352b64

SHA1
e7c8ce2558df722f404551e45b7b180cd44a4c82

SHA256
5299cce40c1e6931d344e54e790fee8eb596716a58b1751331d698f3f8326a0b

SHA512
8ebbc8bbd60fbb4da064e651d5b8f5c78b97995ae957a4f96e978e3bef0443736e70b3ccad8e152dc29f4e1d9d083e007bab510e4799929329b6b2617e78bd6f

Download Submit
/data/data/com.network.android/logs/0vlt.dat

Filesize
12B

MD5
421bc09d04c769682fa1b2bdea15b548

SHA1
f43376a0439397ee5268ab081cb17666ccd12aa2

SHA256
b9b4bbf7699f939d1b5c8a0ae86e5cee30708536f9f9d716342e716a6776480c

SHA512
c05a8e84a90bb624a22659bab5c393063ce3743c30ecccf5ee0b8a2872c6621fc670eef156e9c55581fe722d34d43387f04ecd9ed0001b24212521522a157f75

Download Submit
/data/data/com.network.android/logs/0vlt.dat

Filesize
12B

MD5
184bff9323464be9864b26af5a89281d

SHA1
4ebf61a8130a733802a4c1493e93ac656a1485a9

SHA256
5018aa853894e8c12a95e9f1b733dc4f5f6c7541edde3b6efdc7b9e4f1a44338

SHA512
3f3cefdf7e9b646f97ca235d8819829857bd49c5e738fbe59c6ecb553ffe9490e3258f762f9e2da4834d979b59c1c5b8cff050e724953a38e4eb327cbc937676

Download Submit
/data/data/com.network.android/logs/0vlt.dat

Filesize
12B

MD5
37338e9ef9574c5152bc3ba209cb4793

SHA1
879b408a1f9afeec0521cd0f6448eb0917ba17df

SHA256
a416f39feb4a2f87e6474a7d4648aed6f39e827025e69af3ee8ce900e9b9e173

SHA512
313ff3eb6dee279791e4eac45fa9df84008cdedbf3cbe3b533d76e5a12ffed26a02e42dcbe5da0ed422d2f460901f5b0f72b09e9c75ed949c3561203abd6d6ca

Download Submit
/data/data/com.network.android/logs/0vlt.dat

Filesize
12B

MD5
f5952c3d2e40c21bec8566ef383dc920

SHA1
80bbfce6348015ceeb0d62e1f8ab9d74c39fe0c0

SHA256
7d0f6420ee51ec23cba8ca6f75905c07845005ef5bc3f800884e21572f216b63

SHA512
c29b203d1583803630b76d36965ee556c86daf47ae600847b1be02417b431e551f2a1cff4ecdeadfb64427c028be4a5c22e638433f005044c969795575b83f0c

Download Submit
/data/data/com.network.android/pex.dat

Filesize
12KB

MD5
138d764910cb46a05b83d5af830dcfd4

SHA1
583dafb10cbfa0941821d9fe721b4a28498ae656

SHA256
0aa2c4123b0ccd2e11f3ea6bf425488da6b7db400745fb43e8563aa1d5f95731

SHA512
874b0c9745cb1446ae6e826e7888b08e1e7127b790bf3842093d16499175922a6305c7244c9b42a854cd7685bbe18d879cb057d59ed45bd30fd9dc11748e3584

Download Submit
/data/data/com.network.android/srcsu.dat

Filesize
8KB

MD5
f091e95aa696a326b4b948869fd3df78

SHA1
3e2b4a81bac630973a990ed1e9e0a973158a818a

SHA256
5f1c4d94b3c91704c3955b8954ce543eecb292da4a58b7c61e7592adcffa0f33

SHA512
0b5ed603ca79db5a98e2b4e24d98eecedc7bcdc660efb37241f9c3e40a68e9fab5caac53a1a4e3fb6cfd99ac40c0ab8acf63d4e5ff96c7ab03aebec4f87b35f0

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads