Analysis
-
max time kernel
6s -
max time network
151s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
28/03/2025, 22:09
Static task
static1
Behavioral task
behavioral1
Sample
09e3ce20bce52705b8a881dab468844bf408dc31e5f039662851bc3df1e1364f.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
09e3ce20bce52705b8a881dab468844bf408dc31e5f039662851bc3df1e1364f.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
09e3ce20bce52705b8a881dab468844bf408dc31e5f039662851bc3df1e1364f.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
09e3ce20bce52705b8a881dab468844bf408dc31e5f039662851bc3df1e1364f.apk
-
Size
3.7MB
-
MD5
36990bdc96888e3208cf66f48a0753c0
-
SHA1
7e9edb033481a067233a98ec5d44cc6865b50d40
-
SHA256
09e3ce20bce52705b8a881dab468844bf408dc31e5f039662851bc3df1e1364f
-
SHA512
6158e7c06a34c7e120fb8793abe542cee65fa602cce40d7cb4e39b5f37d040277214b95427b7e529cd2e6371651124a57a48de48499190d3284a45b4cba4ea6a
-
SSDEEP
98304:bd2ZrsgEiIK/z2fHENYVCXKrtmkQcaWqpL:QDIi2fkNz4tmkfaWqx
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4789 com.testtest.qwizzserial /system_ext/framework/androidx.window.sidecar.jar 4789 com.testtest.qwizzserial -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.testtest.qwizzserial
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Android/data/com.testtest.qwizzserial/files/uz3c6b7d6f3b1448f09426aa497df88c15_sms_messages.zip (deleted)
Filesize638B
MD5147cd9ee940fc87af7ea2b3ca4cf444a
SHA15d345974a59c9d1d898ede2657ac2dc22326af66
SHA256a25d53d4b0aeb168c5c145681c5e4a997092e0b77decfb1904da98b7a246ca6f
SHA51274cedb57cd3cc2ea65be3dd916da5286bfc59c35a042bf1816666b8118e0e566efaff44414d2e420636c4db8574f7090088445cfd3e07157b8e162070ad25b66
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b