Analysis
- max time kernel
62s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
23/10/2026, 12:17
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2_5372811853149808045.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2_5372811853149808045.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
General
- Target 2_5372811853149808045.apk
- Size 504KB
- Sample261023-pgalysbw6s
- SHA256 4656aa68ad30a5cf9bcd2b63f21fba7cfa0b70533840e771bd7d6680ef44794b
- MD5 592fa585b64412e31b3da77b1e825208
- SHA1 3689a276f85fd94750dc063860097fdc28ec527f
- SHA512 4ffe14a69d0227952abc36f5514074bed5b9145cdffe020358c484d002b67ae14f3dc657a48b5f891cce6c1361cb6e2da8212911ebc904ad14fa121c5ca8f2d5
- SSDEEP 12288:E99ZC0lVYC+PpEqVcCmfSylRo3xdxq4dtXATPJLW:2nlV7ipE9Cmbp4dmTRLW
- TLSH T16BB4239BDF87A927F125A67BF2718254F2421C5AB3F8E92B07813210BEFC4A40585F95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.good.sunsine - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.good.sunsine - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.good.sunsine - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.good.sunsine
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/OPBKEY_b597b0c2bbce6b4093bbe83b722cfef549f1
- Size 5B
- SHA256 4f09179369a6e29cbfd2013e4d3ea74bb93971e37ea0a3e884be7c7701e7f270
- MD5 94ddec79d8fcac66e21b47ef1399044d
- SHA1 003f5f7d613ba6ee2c53d5deca30a74259c6ba6c
- SHA512 7cd9693e62d2c4ab424ba0ff4f9b688d2e4715379e2a2cd4637963eb1e3742cd14e059e8b50b0470be06fd63da10a0a030170618c04cf50b4e84ac961c876abf
- MD5 SHA1 SHA512
- Path /storage/emulated/0/opaDC.txt
- Size 36B
- SHA256 02b912327fa3b43a56aa2e3ddfc7e6fc4e7658fa5978827dc3ae0b6e7c185cf9
- MD5 166bf546ba7789dd9ce02aa9a5236846
- SHA1 03ffa9c40bbbb18df968aec2e8fc796a387b5cb3
- SHA512 2c2a73a2048c537ddb80378b50e79aaf20a14da9760db2e7e98d191870c3994616b2a5a7ddb248ed85c91c87bae27fbb1402e76d52f0397869fe77cfb28bcec8
- MD5 SHA1 SHA512