Resubmissions
16-06-2022 16:39
220616-t6ez7aafc9 1010-06-2022 11:23
220610-ng7e9aaebq 821-01-2022 23:31
220121-3hqw8adac2 7Analysis
-
max time kernel
1838842s -
max time network
149s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
16-06-2022 16:39
Static task
static1
Behavioral task
behavioral1
Sample
8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b.apk
Resource
android-x86-arm-20220310-en
General
-
Target
8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b.apk
-
Size
6.2MB
-
MD5
73e532519bcab9adc579bac24d889895
-
SHA1
8108bcda08173ff6ee82a7b1ea1cd781364493d8
-
SHA256
8d6e142a9b2c44b5fd43326af05ac40cbbe8b74ec05803086894907c0e243a7b
-
SHA512
9352ebdfee46ced1bee3054688aee3702e0a03a83207e0d8f50bfefc54781bcd902c05699a27b350056b19f55001235441d59da69586cc008a9a92e29e4a7f25
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.nightlight.app -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.nightlight.app
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5930b17fea389ec5b1e43fb1d85350294
SHA1def729a34f475c4fb75b824c4e5d93123c13a759
SHA2567531eb0d54dbe58a9e2d31e6817deefb916a10be246f029d6e4b6f905133cf60
SHA5127ee74f094da3bfc355b1f609001f2240f13bc588f3434e576d61fa0d3f24c7a1451d9f6601a820fef0a749dfba35b05049ddccaad3747b55900c08a487ad9211
-
Filesize
524B
MD507cdef474bb825b1ef3091a7704fb38f
SHA1807cbad6b0a346b3b73bc0b64b5c62d9b9998c76
SHA25680ce8d92ca6a0f490ffe8083deb0623b26614581c1d086d50bb0fefd4e6541aa
SHA512083823d4974314dda3aeab86418394cfa43bad47058bc0d3a9ab27fba9cac4f6c6498aebfe2e1b933a7f974414c14f6d2fa8b22e301f762b49957fc7711e6c89
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
32KB
MD5dc80326979d4e4d82a45e9e52218a765
SHA1d4b80355f6d95120411ce3620e10fe382e144eec
SHA25653b928c541e1a5745612fb3fae93312916297d9f8a897e29448d52d79fc62bb3
SHA512e19da8360bcd0153a7b17c6c33a23d0d47a5d309ed621140efe7f3a49cab19ff3fb46fdd0eb0865391cb1deaaab1eca9b1d846ce63e7c1e8e69a90d818c94eb1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD55f2babe85c4cd70948b33036eb36c9af
SHA1c827de4cc4171ca7142eb0d083c67c03c836ffd0
SHA256fa92b64d616b9b0773968cffe2552576c3c29419d2470c4e9ea5929c530f873c
SHA5120898a01142cb927c5b0951b8141e300ad275e9593e483156a6e35afed5ca20eaa455b31fcb7be6cb67620ed25c4310c12bf2c30ab9c5d68da4457122beaaaba6
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
52KB
MD57a63ac939ef787e702213d823ddf1d8f
SHA161fd2f00e3b5bc45eb7f489f4b93a4ad41ce2fe0
SHA256559ebca3d1168f63e99a0822044b9f55f37bdb62c06fb7b653cc9ca076743796
SHA5124a58a9ca4808ea3edc6394d4544cb5b00868580161dfe581ace1c5bb066195514b7874fa4680936b1dca5ad8e82eafd409fd54ee5675c2c2307e3a952afe146f
-
Filesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
Filesize
524B
MD5ecb4b0a7d9f78fc599578da604996e56
SHA13b729fdbf056effbdab6542566f8071334deedba
SHA2567e54c1c0178c360aa21fa903bbe9a3b962c77714635759efea29749a9b10764b
SHA512ccc218a78956c93721afa65ac1c9af8550e5adf8c3cab230a574fd5a75a09cf711a1f12b2ba15d41553324bce52195ffaf9bc4ce1255fba22b6c7918187f1bf6
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
36KB
MD58c1ace9c506807d255d68cd594584fa9
SHA155d5f9414df5b080d65ca90f0f0041dbe5059994
SHA2563631bf4bdc10b04e3574bc80011d022f5896c12b5baa24886581c6c5d065fb3c
SHA5125d4c614d6124ec3cb6e7880d237c3796b7f82b2491058ccd7d70aafc0c8ab36ceb921c8b9381aeb7784399713ece43ee2655763853dd89d568188ec78b8d43f4
-
Filesize
4KB
MD5d636853e5ce4ec4176e70823222a6832
SHA14cf0434b41d7a7ef2ca1698a753b9319b3dc6ee6
SHA256fe9a988b5cb3a3c39695708254ac26f097833717f34c83e2b121cac592b9de50
SHA5128e1d06ca447bbe29cb6545aaad5e3b6f047151f07f64309e0985bcfa82643eccd753689c8027e978ccdb76752de464561f11b897a3713666b43edeb5657813f4
-
Filesize
4KB
MD500810bec34ba306c5e461f0beeeebbfa
SHA13adb5215c04d317af39dc212870f03d4432c2bf6
SHA25695b616c8703e601a381148d61a3e7c328435441612358559d4601064bcd46607
SHA512ba7c99ddfd7007442ba7725785935122dcc0ee11c29e71bcf92b838096ce2d3149b7194f406319456f7d23cfde79a4b202441a6fb311f4b65a7778688fff542c
-
Filesize
4KB
MD53bd6dda8ce8206502c01fe6a3f91a1f3
SHA1856a137df0dbe97fb7b5e944218c67d68d5f17d6
SHA256384a6869826672a93ac4a78f2f4f0fffcb6ea70c69d7617fac70451838b28070
SHA5127c7e7a5207e696022429a1e3a7daf901afb34b0ade7378394863023e8310ac24f3809ca86f7c8354bfa611b455037259578b22923a3aafcba419729a39ba6dde
-
Filesize
4KB
MD5328f158482b72787507a971cabf7fcab
SHA1cfef1ca946e55c77417301783ed24cc6aabe11b0
SHA2563494b9f1e1370ac2100984c9149a96686ed87926a2dd114032af569d71d263f5
SHA5127c63f34edc186261a8e553a2cdd9c704e4b7be2f4c2e5d10f2d0b210e3c95cdf45ce629db6bf3b76c63a8fc4cc85adc8b01734216b6a6c7c37454b06feede8e1
-
Filesize
4KB
MD519941fbff70da1dbd66885c3bc2dc59f
SHA1677481cd98ded1931a612aa64c0e4c3c3800f42c
SHA25664806808ecdfbd26275057bba2416a78aaabdfcbbf50aac1a6c0c4af0a2ed34d
SHA512a835f7404d7f23dd96b7fa23af84e0fc398c348f0a7af5421b9a6e7df68cd91e1fe79235c6a2efab4d0a2237d3e7113b51c733831251fbe8d313038bd62d6a5f
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/62AB6AF600B9-0001-13EC-21BA997F8575BeginSession.cls_temp
Filesize75B
MD57499d7a215acd1154761a18d724f4536
SHA1cbb18451ff904b5815fb93d301fbe4325621b072
SHA256318aeea1c2a04ab35c058605e52b9062ff4bf34d8e34d5f467c8bb711bd4f6f8
SHA512e810f1237e5666cc431b15b2d1d3e837a3291db6f4a0532ced783e81b9f991b649afeae0f4beebe594f676654c06bd5fe98c2807a490143ac95e2a1b0f79f56f
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/62AB6AF600B9-0001-13EC-21BA997F8575SessionApp.cls_temp
Filesize71B
MD5801d544201c1fd5d81b67262d1cec2a7
SHA1f0d34eebae1204314c91c985420093208b807034
SHA256a0b6f92cdcb27feb510c4f23cfaabba69053c1a9c5be48397493128db6b26664
SHA512698d969234542820dd85d3b71c6541753875bd3db00fb46f463f21690e8977bc70709c5f46fc0cf32f5e0123c9f81979ccd13ab47f6291fc0e10e614df72bf7f
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/62AB6AF600B9-0001-13EC-21BA997F8575SessionDevice.cls_temp
Filesize48B
MD501e5862a63438b9fe31b444c3b19b976
SHA17686c83984c837a10ea1ab52ce9e93f3c8a8a1ef
SHA256ed1d2040f86949a2120888624637eb3a5d2b27f8af8276c4819ea6d90cffcb7d
SHA51215dc4fb9035c09448ec88dda9a5cf147214201c8b44dc7f00a2c04e89d1b5099f79db1f370e30d8a3436881660c7c861e559b397e180146ef9c266cdc7020d01
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/62AB6AF600B9-0001-13EC-21BA997F8575SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-62AB6AF600B9-0001-13EC-21BA997F8575.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.nightlight.app/files/.com.google.firebase.crashlytics/report-persistence/sessions/62AB6AF600B9000113EC21BA997F8575/report
Filesize743B
MD52527c49f4372c29ae97ecb8794daa20f
SHA1feba2b0bc3907f1b5cdac0fe612f4cf14c091888
SHA2569b69620e50887414ed847e9c8729ced862586e6581333b6d7535e44b10902037
SHA5125724930f8f4fcabd75f8f0dd7ddda2b75eef7849f8913ef036f4dbccd854b0460c56f0ada8c49aecbae765a196e3c68473560190e0194c2674feb95739604b53
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD57a9bd73600bf2f6f19d9b770c8292385
SHA19aedfe8a8694a567cf69a12c808adeadda47ecc3
SHA25603641e429c5eea4ccd6b63980ce44598b212e1ad8e107652759b4b314f291cdd
SHA51293b0aaba4fc31285ce28ac4745187386997d6336c744945ffa7a6f7f841bff804d41449904dd727d0eb3c9a7103ac69925f47840f8349443e4002978a80a3476
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
108KB
MD571e62237b5e5c7d0bc22426151781901
SHA13c259e1c618e0609af61105a1de035e52c67ed5d
SHA256f7f487e77c35c7803e0522a8a072297983a6a757c73a88c8239af22bd797421b
SHA5128fe5beb7b9f0ab6384a373c791ce7257227b804add70c9879197d456e91e1568bb4ba1e440b5c10fba790d96ae04c5056fdeccde643af8ac02e6a6791607125c
-
Filesize
134B
MD5c41121c546e7cf1398c02ce29834e91a
SHA1b770ed4782a14c927f59666a92e7b754dff05646
SHA256a779f0fb64831ff0a288b293a709d863dca17f746d2fd3a6fe2d152319a51e9d
SHA5122d6c1065154af6f456710ae6326300e697a70bc7e15d729d49390f2c2a423ca57df59116b41ae7c76179abb1b99cd3a64f3fa891fb6c628aa0c5a42fbbffe291
-
Filesize
188B
MD5d27b1c57b78b69c55b0c4becdb93dac4
SHA19aa8c57783c3ff05bd846e4dec4d28fa7666e05e
SHA256a901e9203b250c383526fc23dbec38e084646449aef2200e516a0a9a855285cf
SHA51240d7ac84188130ed551884efd2b74266a18a42a3eab4d1958991fe0aaafa9ff116d816528a54b19750942009206f12a96f0e233d7476bf3c4606ecb055f5b624
-
Filesize
239B
MD5eb85f956f43561ac80ba602e192872c7
SHA14b7b30bc3d705cc9f9e92828a605e945b549d555
SHA25667e2949e4ed6c0603bd7dca7be29566dad8073f85a1c01aa7b4eb513f97b3b43
SHA5126f0395ca0eedbebd629a2df02d5edbd4ead59a40550ba6ed1380ee5da26ba490b2f9804944327872f0627f2339f226c93daee65072a2a84006bb7bef54b0452b
-
Filesize
192B
MD5cb1ced0313510c65110e11acbe1be90c
SHA1a5f6cd893d0686148848be59abe866457e24638c
SHA25699a6625fd64c4cd2d11fd9af2cd518c95b2268ea8ac58ba372fa5ebf53e2bd93
SHA5121d82c04a40fbdb33a387c9237e2d4e277de217b5f6e8d42ac3e1b25cadcb6166f0249b43467932055d209a75baa4697e6bfed3d10cd28326582dd7f1b877c090
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
235B
MD560cffce125335717f9c83c881258cbbe
SHA1ca6155f1738f043bf8411186a6551c56c725510e
SHA2561e434634bd2fa23bd000c5139643eb43425ba411f8da852710fbec8d289d4a63
SHA512522a559fd72cb6afb0f093a7a6d6d387ea9010a64a2de6b9f324a5609471d9308a72cc3493777b216b06828a36557a30fe15337ee15c5106440c01bcebf93da6