Analysis
-
max time kernel
3892848s -
max time network
96s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 19:09
Static task
static1
Behavioral task
behavioral1
Sample
c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547.apk
-
Size
312KB
-
MD5
1285e688bb834e348023425ab4bbbfa5
-
SHA1
605526f8ee8bb7150dbd2a4b90ab9ab5edabd7da
-
SHA256
c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547
-
SHA512
6cf4ab3fa4222487731d7cc353b96db63129e9138092167abdb577f6cace82f4f7ffb0a992e9d76c30ae5b2a24f4c87a9bdcd767f30c52ee885ea1f5b2d5d258
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
Processes:
wcqrucdpzh.otstodvvsm.vrbnjqrsrrdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId wcqrucdpzh.otstodvvsm.vrbnjqrsrr Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText wcqrucdpzh.otstodvvsm.vrbnjqrsrr -
Acquires the wake lock. 1 IoCs
Processes:
wcqrucdpzh.otstodvvsm.vrbnjqrsrrdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock wcqrucdpzh.otstodvvsm.vrbnjqrsrr
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/wcqrucdpzh.otstodvvsm.vrbnjqrsrr/shared_prefs/Data.xmlFilesize
159B
MD56aea9ff66222e9fa4c87a785533472bd
SHA171d7c6566e0722257d07899c3c521ad72be75e9f
SHA25615656211d40cacb47485edc0a7a0345752c6c25393e3194eb386fa628d9f7385
SHA512ffb44484fc5f720001d332f6485422dcda8454022f03e20d5d7a154709549310808df89c89948111743046cc1e393be1eeadf76e5a05349cfbc3a098db55548d
-
/sdcard/Android/data/.nomediaMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/sdcard/Android/data/.nomedia.LucyFilesize
16B
MD597c3d4e1795eecc4f8f6a2625ecf5224
SHA1285136099146973c5eb301de2d5468db88a1247e
SHA256864134648e8f8d7bbde503a428f7b99785fdce74645575bcb2091c807b7a7e20
SHA512bf71af30fc20082bf8e2f1fe0dc943564454d6aeb6577d4df002ad5eb7cf1bc9d4932d8cfdc91fcd99e3f960c5529a12874f8cefee76ee320ffeda29e412e0f6
-
/sdcard/Android/data/com.google.android.youtube/cache/exo/1a65deae30414f2c.uidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/sdcard/Android/data/com.google.android.youtube/cache/exo/1a65deae30414f2c.uid.LucyFilesize
16B
MD597c3d4e1795eecc4f8f6a2625ecf5224
SHA1285136099146973c5eb301de2d5468db88a1247e
SHA256864134648e8f8d7bbde503a428f7b99785fdce74645575bcb2091c807b7a7e20
SHA512bf71af30fc20082bf8e2f1fe0dc943564454d6aeb6577d4df002ad5eb7cf1bc9d4932d8cfdc91fcd99e3f960c5529a12874f8cefee76ee320ffeda29e412e0f6