Resubmissions

28-07-2022 16:29

220728-tzl5xshce2 10

14-09-2021 07:22

210914-h68rqafbh5 8

Analysis

  • max time kernel
    1168570s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    28-07-2022 16:29

General

  • Target

    AntiSPAM.apk

  • Size

    1.7MB

  • MD5

    5f1563097c7d2378a10d43baf7210839

  • SHA1

    e5fdc48e7503b97be4e44af35d1133a0b7c18c39

  • SHA256

    d774779a1e53d5c1012ec855cd6567d6e9f779299ddf0d07e96dde6c0679f4df

  • SHA512

    a6534634eaf47da407fd608d753b6f3263fab95448049b1998ae096210d73990a53d92a08aa4379099ee3dce0bcbf51703d4cbbbec104c9a1c9a2952663d7521

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs

Processes

  • b4a.example
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    PID:4645

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/b4a.example/files/_trv
    Filesize

    12B

    MD5

    abdbb534c848c7edfb4a407c25b29902

    SHA1

    62380bdc3037cb5df6c3fb780aaf53073506ba31

    SHA256

    dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4

    SHA512

    506edaee43849f8ee043930f13b45f53b80d783bb9fa1b9393fe32e0ddea61f5cb31a57d4d1b811a0d2fc6d15dcc0a8f7b1aedd288af328e032ed25884c14bbd

  • /data/user/0/b4a.example/files/me_device.json
    Filesize

    157B

    MD5

    50d1a4e1d373c2927492ae1581ffc385

    SHA1

    680713878a363670f41fc2cc26fc52f45fb22d2f

    SHA256

    ac30e963916c282a5542ab4d9895d7068f1d5bd3d775e6c3767bdb4376db4e1b

    SHA512

    f49e209eb2d34c04bd464fb38495b02d2a8ffa0e34ab119bcc64ad9c45244a7c42c202a514e9a51086f86774e1c8bf56fb8638927e13c868b4343b0c0a816687