bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151

Resubmissions

04-10-2022 09:59

221004-lz275saec6 8

26-09-2022 05:56

17-09-2022 08:02

06-09-2022 18:32

06-09-2022 18:14

Analysis

max time kernel
336982s
max time network
150s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
06-09-2022 18:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
Size

4.1MB
MD5

cc551ea1e9bb262a25f25a2f15412905
SHA1

5856d942486d0ef997527591c7ae58b6d6a4bf07
SHA256

bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151
SHA512

8b511c9e9cfd784a0537027c738ae6d4c722f0358814b4fb8089c8302a07320e49990183fd5f6b9006e99e5c1622a17d5f7ef21613c7075761d3386e3cc44f62
SSDEEP

98304:Jeq7CtjZunGGO2mASwWX47tll0FCYHBjnDSY6vkyFmwnM/yd2ofrHS:5ytun3O2mAJRll0F/hLGkyFm//T

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.ohalqpdj.discopet
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.ohalqpdj.discopet
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.ohalqpdj.discopet

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

evasion

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.ohalqpdj.discopet

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.ohalqpdj.discopet

com.ohalqpdj.discopet
1⤵
- Makes use of the framework's Accessibility service.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4699

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.ohalqpdj.discopet/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
086328ca5aa409a7061aa1a4e256c692

SHA1
d6a527723ccffbce00a89af64ea89cd45ba05613

SHA256
9666319a1ca8a10c2efda9c0094ae43e66209be5fab7b6e9030249ccbf26eb53

SHA512
5583292c5e4d5464c5ee099040b5b81f656e566bf64cb6a644d1d4bf4500627a1143befd7cf388484c27570026975cf94305ceacc94dfb4afa4515f04416e333

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
96f1d979e588cc7d56141792612fd673

SHA1
06f6b70416e8310181f1368e808aec315770e1f0

SHA256
5253081b520bea97bb85ff29ada55d0768edf06ff471be5515c8d4867e4301d1

SHA512
4d9e2cabf2a579562ec50e383eb86973c45c5ae40f90762851c5da741bfd85d3049f3c30abf37ed3cbb091940f3fe49f0f5a7357232b58d48d1de81593f53c01

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/webview_data.lock

Filesize
27B

MD5
31b59c5866b38e05c43123787c80aa51

SHA1
ce8823d44d5b583cdad1da144858c3b3d438e3ba

SHA256
ed78419794c17c1848402bf0b250e2d8034a223eea35114d6ff426033cb6536a

SHA512
229fc7e84ad5e8d91c57e39291eaed40df5021a849bfb2b6087958fe83f81b09976650e942d5ff7001da5a64d0aa114f8748ecc1e49a3a579b8c4288f336b8a5

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
222a8bd1c9283f8363dfb512530cd1d0

SHA1
d3f0a7a1efae9f19779828e36269829e6daac7a3

SHA256
a5c30219bd66ff66492586ddad7b642d55adc8d680408ab3ab7bf5a7f9934d05

SHA512
35fe632fad42525cdfba75a886050763095978e6311b0dd811094be17dfcef03fcb58b4afa7509d6d064e97150b032d80e8d3cf342614bcccabcec77f6fcbf3e

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
05c4e88ff6405319cac1299fc2db60d9

SHA1
a206d1b6ab36774e883e9d93a8d8b39ce9f5acd9

SHA256
08ada641d64db209d54d23433887263c40850de9ebf51de376af2cdb9f0d11a5

SHA512
58bc07240080c85c2a768ad2e9d4f1a8e3aca2679e0105a07799dd3e0dbaed84aa44a2c67b5123137a2d8c772578b0c57cd722a6157db7cebb51e3e738e0570f

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
6c55cb257eb74b78393b34aab89ba67e

SHA1
68b3f9dd06f04f369917925444c95568fa5c7bba

SHA256
96c56502a8221bfa7df04e9c92ec2fb81645856e21cd2456216cd7b18706df47

SHA512
4d404018d049c4ffd29ca78866608461b3a94ce1b857c226ebeadb6c414764b9c182ef4f376c6cd6b1874e1ea971e823c10a234631f98971cf1d67c79d6b1c04

Download Submit
/data/user/0/com.ohalqpdj.discopet/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db

Filesize
104KB

MD5
5ed4345b21fe9afb38341bd174bdf29c

SHA1
420ae1010e5824b1b6fb9704ca11c4c302ed7aca

SHA256
fd4fd37f8f8e865de643a968c073189fc2f14b7d26183858741943d6a117e61d

SHA512
3e231621027c483798d4ad38b19786aa99d60c3ed99ad99d59313a75553592e6409475149b284e22c56854a11aa6549a1c40ba078e0773cee9205b37662a01b1

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-journal

Filesize
1KB

MD5
5930c62e8e5c1865c5c22bc36a0385b7

SHA1
a235dbb3b43ee80ae2690ddb136638bbb901dd75

SHA256
b5723a7f9e4afd76facc1e2cd37052e5bc98ef95954b48f000cbbcac45566ff1

SHA512
0d727e230e198fd9afd858cd9be15a90e87f8596430eff04c623b51d802f03622138624aff57a78e68cb0494d485a4ac8fabe83d144d059767ee5e2dddafdeaa

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

Filesize
152B

MD5
95c93bbbc75d915d28ab8807f80be820

SHA1
f053e9244e6cfb02058a3125870f1c767eee5654

SHA256
3fccf25a7a069ea47811b4682f2f40200cefa617a38174cc03b00af7222c5189

SHA512
ad222af790c16bb03ff14cea3346ca1bfd7d916dc1d7869aa98034ea34b9506e4463ab4b6c553d9b82dca8a2c5dd58c4243e27eb734fd2da4a2d2e9af1e0f632

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

Filesize
398B

MD5
3be406fa70c91053333b6f4f82f6fdeb

SHA1
05e910d705db64707087c3ee650dadd71b891409

SHA256
ce7ee0f5e924450bd48febc401ad71f77b7517e2d24cbfd72834986ce72b2b72

SHA512
5572729a02b844ed2cbf6b6ae8401663fee797a225d187a9703bc6f2eb3d6df953b5d60bbf804828d5c21c0aa074a89bf0f906318fbb053ea6b3ddf55998ca92

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads