Analysis
-
max time kernel
886755s -
max time network
178s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system -
submitted
24-07-2022 01:56
Behavioral task
behavioral1
Sample
afd37345af9c24d287e5d12e21e05e1f8a3c625a08a5d2a8b66217632509d989.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
afd37345af9c24d287e5d12e21e05e1f8a3c625a08a5d2a8b66217632509d989.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
afd37345af9c24d287e5d12e21e05e1f8a3c625a08a5d2a8b66217632509d989.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
afd37345af9c24d287e5d12e21e05e1f8a3c625a08a5d2a8b66217632509d989.apk
-
Size
3.4MB
-
MD5
45c8120d7108d4d363cddf06e662f0e9
-
SHA1
58c57a4364cdda528a80bb727b735cb5451cded0
-
SHA256
afd37345af9c24d287e5d12e21e05e1f8a3c625a08a5d2a8b66217632509d989
-
SHA512
ec343834002604da30d91b60b50f67061291ca5e5750ba972afbcf0073cc32f6e411938b7e01d3e9a68dffce4158070371036ce63a27aa80a5c7d1212b5dc804
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
Processes:
com.custom.virtualnumberdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.custom.virtualnumber
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.custom.virtualnumber/databases/phone_databaseFilesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
/data/user/0/com.custom.virtualnumber/databases/phone_database-journalFilesize
1KB
MD5fb0560154f20f201ad23f658a9949eea
SHA1db85e9caa3b5794da89479570d175b621b132309
SHA25685a25db2b24ea8713f92c5d52f8a4567c3d3dbf891417928ac4ddcc75c3b3dca
SHA512f2b4fd13a64c9063f4565b0dd87ea375c696f9b094d04af4dabbcfc239d5fd08e5ae2873518d92142d2cda8d4a72cea3267ed3974e3b59a18685be035373a70c
-
/data/user/0/com.custom.virtualnumber/databases/phone_database-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/com.custom.virtualnumber/databases/phone_database-walFilesize
249KB
MD5014c61c88460d1ea91905c5411caa18c
SHA19d3509d5e8da9ebbc5df912bd3ff194572680089
SHA256028b533d05047a23e73c445e4487887c195bb2a322bda55100adf77e4ff84482
SHA51202829631a452dcdf08ab735ed409a2c725b5f4619938ae24c5778ab5ce7850adbb386478ab2e3af23c7b32706a586e4f4a64860005e3e67ce419cee9637aa590
-
/data/user/0/com.custom.virtualnumber/databases/prdownloader.dbFilesize
64KB
MD579364c3420314c22b00c0f27cd7f1eb7
SHA1b014fa91092066c374436260f83ce3d2a336a21f
SHA25679263b4dbaef45e17e01ca89bf5109c04b6f0fdbec57fcbbe8733e234ff9ccee
SHA5120d7c75c1b48d7d05ebcd2438d50261f30adf072a95adcca07e11142c182fb7419843365a3e5dc0417a111b9e20db34c7b12236b04a7873df72741bbb3c443f0c
-
/data/user/0/com.custom.virtualnumber/databases/prdownloader.db-journalFilesize
1KB
MD5508fd50a72bda915325b2723da10c51d
SHA1de437f44d7cd75b80d4bb12313490492a49a3de3
SHA256ef911bc0cc135098fb93adfb975ffbd6dcd5b3b5e99545d67c465eb57858575c
SHA512903d430711175a762f3558a8ded593b91ad5814fcb912bc3e09d89c848ab2e3f4b7189f6d2ca626b9664ff09c2d4c1b3f79fefd6597c48ee13779afbe235bfe3