GroDDViewer: SaveMe

Sample name: saveme_78835947CCA21BA42110A4F206A7A486

Malware Family

Remote controlled spyware which can make phone calls and send SMS

Sample description:

There is no specificities on the information flow graph. The DNS server of Google (8.8.8.8) is used to identify the server, but as the server is down no outgoing socket is observed.

File details:

  • MD5 : 78835947cca21ba42110a4f206a7a486
  • SHA256 : 919a015245f045a8da7652cefac26e71808b22635c6f3217fd1f0debd61d4330
  • Size : 2.2 MB
View mode
System Flow Graph
Type: Group: Socket: .tmp: .db-journal: .txt: .shaders_cache: .db: .apk: .tmp: .db-journal: .txt: .shaders_cache: .db: .apk:
Grid Layout
Nb processes:

  • Graph legend
  • process
  • file
  • socket
Interactions frequency and zoom on time intervals
Min: 0 | Max: 1000 |
Current: 0
Speed: 500