6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77

Analysis

max time kernel
6s
max time network
18s
platform
android-9_x86
resource
android-x86-arm-20260325-es
resource tags

arch:armarch:x86image:android-x86-arm-20260325-eslocale:es-esos:android-9-x86system
submitted
08/08/2026, 02:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LenovoSafeWidget115.apk
Size 123KB
Sample260808-c2m2ka1wex
SHA256 6972ef902f648ec405adec1a8ac2843048fe269e0570cfa71379545d9b0fbe77
MD5 12c89f415f86784edddeb18072f5113f
SHA1 135c18ae3ca1878895391abe5bd69f858b73fb8c
SHA512 8c4e31290a966db551ae53ca720247779929f2e6ab93166bdd11ba46d6872d328e2670ce2ebd56f95bcbe225f821a4c07856aed9f5ccf677b2876bec1c3cbff0
SSDEEP 3072:znyleVG+yjnp0qWhjKJE0hil5uBl1n8HFZAhCWij:IeM+y7iXWJEyvIz
TLSH
T1BAC3E0C0FB60E436C8739B32D2E59702BE19C8619249B773211DB1944EFBE68778A7D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lenovo.safecenterwidget

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.lenovo.safecenterwidget

com.lenovo.safecenterwidget
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4267

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lenovo_reaper.db5

Path /data/data/com.lenovo.safecenterwidget/files/lenovo_reaper.db5
Size 8KB
SHA256 166172b44ff11b5b0aa4e395f7c63624d3bc4b1bce1a44be94b86f2807d5398c
MD5 e2bb8c85218dce72340a025e8c580151
SHA1 4ff7047e9cc6063571c4364c6a05d1863f756572
SHA512 c65460a5d1bd4a6bd2bfd5cb578c55e4ea1913653f4b5772bc40a14fbc45c0fdf416eb8549fe72372bc23f1047e596e7c7b985aa74e1a4d04fd247c70dde8d5c
SSDEEP 6:02ucsSNF7F7EXwy977F7F7FlnK8EL97S7F7F7FPrrR5zfTDoQcLPHqelrU:0JkuXwy97HnK8EL97SxRVMQcLCj
TLSH
T11B021776039ED512E27AA232DC589B0F1DD6A46D5B5F8102E70193128B393A8713C3DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download