Resubmissions

28-07-2022 16:30

220728-tztj1ahhel 10

14-09-2021 07:23

210914-h7s3naacbq 8

Analysis

  • max time kernel
    1168576s
  • max time network
    143s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
  • submitted
    28-07-2022 16:30

General

  • Target

    AntiSPAM (2).apk

  • Size

    1.7MB

  • MD5

    91857c5208e6f29e2179afde5942bdd7

  • SHA1

    44031eb5547cc267580daa66e40dbdd49dc34ce5

  • SHA256

    46f4f981be30d60795164f97b45219c523dbf8f59608901eb29da42bcf941cfe

  • SHA512

    36761f54ac9dd03eb493bc0803874cb8cee255f17747c330d217e6a3f88392e6020a01fc6ee28db6a206b5809003a88fe70e9e772c1e9a870f2473a6cd302d37

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs

Processes

  • b4a.example
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    PID:4502

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/b4a.example/files/_trv

    Filesize

    12B

    MD5

    abdbb534c848c7edfb4a407c25b29902

    SHA1

    62380bdc3037cb5df6c3fb780aaf53073506ba31

    SHA256

    dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4

    SHA512

    506edaee43849f8ee043930f13b45f53b80d783bb9fa1b9393fe32e0ddea61f5cb31a57d4d1b811a0d2fc6d15dcc0a8f7b1aedd288af328e032ed25884c14bbd

  • /data/user/0/b4a.example/files/me_device.json

    Filesize

    155B

    MD5

    4309eb58f8e11c8db8ae10823bc979ff

    SHA1

    6552715e15f0e571441b8268e3825f8a7c4e172c

    SHA256

    28e862d15a4a33ebcfd7b7193b81c1d27d8ff9d2d9d4fe740f0689e912a4e4c5

    SHA512

    bc310fe175c78aa7931838ca577523e953bd3d4f648ccc4e198d042eb7fffc5ca90aece70d35d8e81bda11aea4b488a4af27f2a16f38bdee38f5c5fa1ea10c55