Overview

overview

7

Static

static

6

Mistressmode.apk

android-9-x86

Mistressmode.apk

android-10-x64

6

Mistressmode.apk

android-11-x64

7

Analysis

  • max time kernel
    22s
  • max time network
    23s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    28/03/2025, 17:07 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Mistressmode.apk

  • Size

    16.9MB

  • MD5

    08e872ae24bd9d0c468841cb8ee98b2f

  • SHA1

    0836ad17e4eae507a4f7e75383c109cad366f420

  • SHA256

    5b4e517c0f1f07ee7cc6037b42d31bf9404944c34f0ff3a5484aa665ba336b37

  • SHA512

    f6e4f946c51762624a8e3d8a3a350842bb74683f1d3f155761aca35d6115fae22ec5dd138a183aec483475fa1a0df759fca45327624c73dfe12522bdf3e4b57d

  • SSDEEP

    393216:c8vIgDOPWYkgJCtfe7iepFNAssNEltJ5eMQIo1gGHkGPjE7Tu:wW/YtgtfgNAXWtlQRLHbPsTu

Score
7/10
evasion

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs

Processes

  • com.send2yuki.mistressmode
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4855

Network

  • flag-au
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.16.238
  • flag-au
    DNS
    www.youtube.com
    Remote address:
    1.1.1.1:53
    Request
    www.youtube.com
    IN A
    Response
    www.youtube.com
    IN CNAME
    youtube-ui.l.google.com
    youtube-ui.l.google.com
    IN A
    172.217.169.78
    youtube-ui.l.google.com
    IN A
    216.58.213.14
    youtube-ui.l.google.com
    IN A
    216.58.204.78
    youtube-ui.l.google.com
    IN A
    216.58.201.110
    youtube-ui.l.google.com
    IN A
    142.250.178.14
    youtube-ui.l.google.com
    IN A
    142.250.180.14
    youtube-ui.l.google.com
    IN A
    216.58.212.206
    youtube-ui.l.google.com
    IN A
    216.58.212.238
    youtube-ui.l.google.com
    IN A
    142.250.187.238
    youtube-ui.l.google.com
    IN A
    142.250.187.206
    youtube-ui.l.google.com
    IN A
    142.250.200.46
    youtube-ui.l.google.com
    IN A
    142.250.179.238
    youtube-ui.l.google.com
    IN A
    172.217.16.238
    youtube-ui.l.google.com
    IN A
    172.217.169.14
    youtube-ui.l.google.com
    IN A
    142.250.200.14
  • flag-au
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.187.232
  • 142.250.187.206:443
    tls, https
    1.4kB
     40 B
     1
    1
  • 172.217.16.238:443
    android.apis.google.com
    tls
    2.6kB
     6.0kB
     12
    11
  • 172.217.169.78:443
    www.youtube.com
    tls
    2.1kB
     8.4kB
     17
    15
  • 172.217.16.238:443
    android.apis.google.com
    tls
    2.6kB
     6.1kB
     12
    11
  • 216.239.32.223:443
    tls, https
    128 B
     40 B
     2
    1
  • 142.250.187.232:443
    ssl.google-analytics.com
    tls
    1.3kB
     6.3kB
     9
    9
  • 224.0.0.251:5353
    2.6kB
     10
  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
     109 B
     1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.16.238

  • 1.1.1.1:53
    www.youtube.com
    dns
    61 B
     335 B
     1
    1

    DNS Request

    www.youtube.com

    DNS Response

    172.217.169.78
    216.58.213.14
    216.58.204.78
    216.58.201.110
    142.250.178.14
    142.250.180.14
    216.58.212.206
    216.58.212.238
    142.250.187.238
    142.250.187.206
    142.250.200.46
    142.250.179.238
    172.217.16.238
    172.217.169.14
    142.250.200.14

  • 172.217.169.78:443
    www.youtube.com
    https
    1.4kB
     54 B
     1
    1
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
     86 B
     1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.187.232

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /system_ext/framework/androidx.window.sidecar.jar
    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.