Analysis

  • max time kernel
    45s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    28/03/2025, 22:07

General

  • Target

    a5d6442b832e97d4c28ffc2e076469d1f5cdfc3b118b77ecd68cb5bcaf8802ff.apk

  • Size

    2.3MB

  • MD5

    2a4dcc641e2ca5baa6acf66101d360c8

  • SHA1

    1b6c059f31433327ce9e7223f86c689d9e816041

  • SHA256

    a5d6442b832e97d4c28ffc2e076469d1f5cdfc3b118b77ecd68cb5bcaf8802ff

  • SHA512

    cc135f311e6493f60b8aeb96ee5ffdca9a8f7cac92ad4a00034c8cf70b9522ef8ef187b4a5fc1feacc2c85f9e644738b93dda7d7e8c307ad480361c348f18541

  • SSDEEP

    24576:5nglhQnKpL73/K8Mp55ewAYlBwaSnfxA47EnZTF1XEhw8ZKZvzpERRukBQRzgdDH:5nglhK8O5ewQfxdS/UhDOv9CFdj

Malware Config

Signatures

Processes

  • ru.putisha.app
    1⤵
    • Queries the mobile country code (MCC)
    • Requests changing the default SMS application.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4342

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ru.putisha.app/files/profileInstalled

    Filesize

    24B

    MD5

    1e8f93460f6c49102fe6a2d616d0bc64

    SHA1

    f7589e73877985ecf77dfe6ae67c836f779197ce

    SHA256

    7d58f7689ff3d6a1e909ae8ffd13195867fc915ab1d15bc7cc56e3b9b722cadb

    SHA512

    1ba488da2b46de24ff741cac3c0fcdb70495b6c4cf3eb0b148c55a264ddac78308e8d506ac36337bd266a688367ed99f386bfe01542e729ee118777f1b963683

  • /data/data/ru.putisha.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    649f5a7b593c11f33a3f8063ecb7455e

    SHA1

    742557b1e2eddd161f7c8793ebc4e06da0072930

    SHA256

    d813a3a726243129201206857ac821696ee6117514630401e9213e9a478497b4

    SHA512

    a627f7d018a14b49593bbe9ab25b0f95c15dff47d5f2b5363bd83ee6deb202dbe2a0afcaa66e4eae1358df7cd05a1930c5b4bd2b2bcfb83c05682d1efa0dca08

  • /data/misc/profiles/cur/0/ru.putisha.app/primary.prof

    Filesize

    1KB

    MD5

    9929cb8e4ac5fbd2379e25ff7b4ec2c7

    SHA1

    dc529a7149329762b1309aeaebc9ba45de2c45da

    SHA256

    17e9a12a2fcc68cdeca9f93f1bb94794ada2b6c51bec97b0d9715138ab6be794

    SHA512

    dea5f78822b1d3bcab2794993de909072dcb32c42575317eacce0b14a1e7bea2b627b30994cf2970df0ab73dda0356827c557e3b11f8c83f7bac4abebc11e1f0

  • /data/misc/profiles/cur/0/ru.putisha.app/primary.prof

    Filesize

    2KB

    MD5

    17609e719a39e28526d84f2168c5f36b

    SHA1

    d8c5464e44eecf09c1fa31491650ec0274394f44

    SHA256

    61b18bd4ab2d64c0ab524e7c7803838f230d4389418930246daf78a2559ac410

    SHA512

    f7335f5e0ef2b415803267f740d6e0eb6cdbde68ff586d3c48339272698156575ed5350e18ae8384e0b1eb523c463067648bdd843d1074463e86ea6c66b3bc3b