Analysis
-
max time kernel
7s -
max time network
156s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
28/03/2025, 22:07
Static task
static1
Behavioral task
behavioral1
Sample
d84f7fce3bc49b9cec3e67b3ac5bec1b48d69ebbffaf9f4a5abb5ec9c463f88d.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
d84f7fce3bc49b9cec3e67b3ac5bec1b48d69ebbffaf9f4a5abb5ec9c463f88d.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
d84f7fce3bc49b9cec3e67b3ac5bec1b48d69ebbffaf9f4a5abb5ec9c463f88d.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
d84f7fce3bc49b9cec3e67b3ac5bec1b48d69ebbffaf9f4a5abb5ec9c463f88d.apk
-
Size
3.7MB
-
MD5
dfc32a603eb5139167d7b68c7db05f82
-
SHA1
d37a3d04496525e8813be96f15d9e9c00e9ce01f
-
SHA256
d84f7fce3bc49b9cec3e67b3ac5bec1b48d69ebbffaf9f4a5abb5ec9c463f88d
-
SHA512
5df11c82e160e91eb077856cb82b6359620ccf465e533a5e5c50bec59dd192f9f15fd6423906082d87848ee1c4e4f822dfe3edc9cee179f0f4b2e6d6eb7fe151
-
SSDEEP
98304:kd2ZrsgEiIK/z2fHENYVCXKrtmkQcakqpD:3DIi2fkNz4tmkfakqF
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4799 com.testtest.qwizzserial /system_ext/framework/androidx.window.sidecar.jar 4799 com.testtest.qwizzserial -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.testtest.qwizzserial
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Android/data/com.testtest.qwizzserial/files/uz01f05fd4054645f2800986bd89db64f1_sms_messages.zip (deleted)
Filesize638B
MD5250aa5bba7c7150c73daf8fe55d3ac86
SHA153caf8bb1bb58b71f7a55353a0ce2ae22282b9d9
SHA25602b4e493577198f39a06ba2f5742fff1daa59af823061eb705337141224965c0
SHA512c23bd354062f30af76d453e6586aff8c2015964ead4ec97f9487570a046e8dbffacbd1be5f065eca5f01ae62863aa2e006c08b35dcdd0aa6741304467b79b78d
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b