bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151

Resubmissions

04-10-2022 09:59

221004-lz275saec6 8

26-09-2022 05:56

17-09-2022 08:02

06-09-2022 18:32

06-09-2022 18:14

Analysis

max time kernel
1249577s
max time network
133s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
17-09-2022 08:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151.apk
Size

4.1MB
MD5

cc551ea1e9bb262a25f25a2f15412905
SHA1

5856d942486d0ef997527591c7ae58b6d6a4bf07
SHA256

bf3fcdba7148627abfed402d038c99d3b2e60cd87cd04fe22b6ea3aac5ac9151
SHA512

8b511c9e9cfd784a0537027c738ae6d4c722f0358814b4fb8089c8302a07320e49990183fd5f6b9006e99e5c1622a17d5f7ef21613c7075761d3386e3cc44f62
SSDEEP

98304:Jeq7CtjZunGGO2mASwWX47tll0FCYHBjnDSY6vkyFmwnM/yd2ofrHS:5ytun3O2mAJRll0F/hLGkyFm//T

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.ohalqpdj.discopet
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.ohalqpdj.discopet
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.ohalqpdj.discopet

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

evasion

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.ohalqpdj.discopet

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.ohalqpdj.discopet

com.ohalqpdj.discopet
1⤵
- Makes use of the framework's Accessibility service.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4139

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
fd89c155f07a3cb83facd5aac7c365d9

SHA1
657c3e897853c5cee74729064f4c30c5d45a727c

SHA256
4e1b76e8f657d498da3f220a4e2cc8c9e35b010712796a4cf24641194ae4d0c5

SHA512
3538be161531acdfbd25d31e73ca35381d576a44a740023207cf50b10ff136b6110016f7bd4f3ed87c4338adc0189bc939976bdfda52e21cc1f1dff7a4a8b44f

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
4d74d8fa1a2feb4787d4b96138e393b4

SHA1
a8e411bde0992e63f41558a08134ab4e1a3a16e6

SHA256
6d5edcab430c1a0465fe6a145456ec64e9ed24da4a0762e72a94bcabdcc52107

SHA512
6471b09111e24b704c1b17038d3a7e1d2253b0a96effe2be43c962bbae1e0daab70a8384aaac5fc2083ab79feb9e79654427dfa78c32364c96c5224ded0e4de1

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/Web Data-journal

Filesize
1KB

MD5
36dd23258e875fe2590f3e7ade7d7b13

SHA1
6d9ad3ae69b9af7ca225634957b46efdc30731dd

SHA256
8ad4432f090936eeac787c23bcc481faef040180f299602e4e2f2c9609bd5e8d

SHA512
b897022a18de1edf4154891a01380ef2b0c9a7d2c04d8aec960a0e0fcaf12b0315960765636b8991bfc43e4712d93cf4e98632bb036b3ebecb450128f173d90e

Download Submit
/data/user/0/com.ohalqpdj.discopet/app_webview/metrics_guid

Filesize
36B

MD5
46ea4ce74785ff414607a21aa1c38596

SHA1
eb571cd68ae30816c52e5f270225d57c2f582a2a

SHA256
8f4923130754a2e57fcc67cea8fbbb0f26ea4acf9a93e87cb42d1a5276d6be67

SHA512
ed9723363a156818711087b1787bba0c8abf676005c4e3afaf9f9742a3ccabe10a0e2174d727e7577a6994160307508403b4218344a71fe4468f97d738a29386

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db

Filesize
36KB

MD5
f46c44a99719d74081d922fd2f690250

SHA1
7bf94c0de540c5c19dfa350d29e8868a20e6c44b

SHA256
0ed8c10481f045914de45dfa4cfbe31bbe2c7dc5e032e23cb4533fdde31a3d2e

SHA512
27c3d331cfdf58cd3c69e99f25c479ee9b195701fe756d111493ee62c837bf525032e03afc3ff3e7f86fcd4f94aaf984d712029074c13d520b9ee5f2f1c695f4

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-journal

Filesize
524B

MD5
ea1e7e9117df17eed17cf2d2da7e2933

SHA1
28a57f7beadd70ac905512486c95588bbbf74d00

SHA256
d6d84a6d3c2ac34a7a2610009383eb26cf646f3852266876f83fc376885278be

SHA512
4ee090607c18ffcd3afc0d551c2040e631d0cd7d5c0de220359d8e069b8e1771570377e04ca786ca25c37371d3c17f75c02b90477b48cf718fb4ea974e3320e9

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-wal

Filesize
68KB

MD5
a56439bf452dfec073ef833e6f115f23

SHA1
3a77fd5144ac96d0f3a0ceab61b4a4cace2d1db6

SHA256
5ae5166ace6e43e9efa0a22385be6334b87b9239faac7899752125a6a73e9f73

SHA512
a61ddd89cde9694fe845c9141ef66dd2d2faa12aff87e4237b683eb83e3b042d32aa2c2cc829b11f74d0e0749bbee45885957cd6e3301c2797e39af31f15bef8

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-wal

Filesize
44KB

MD5
29a87b489458a6bc8ad4652858d0cb1d

SHA1
f092c2ef463fe690eabff57e5c1691d72474914f

SHA256
a516cdd255553f8649db324f52c842da98644cb20dc1165129ce256fce33cbca

SHA512
5df46b583f90c858717302d6d43f8e5408bcd7723117b25d3b0bb001e46e00b592a6f9031953a029f917870f33a851e7481ff8864f2a36689b9d299fbe75cfa9

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-wal

Filesize
20KB

MD5
658cbec758a3db1fc8be306994e5d0c5

SHA1
58597bfcfb346de618d12e6a6f7e5df4cf22ad60

SHA256
9e7414be17b16df6fa43180b785b1513c8c2552ab84d531d01b62dc51ecd521c

SHA512
51117848be6425fd3c2ea7454840dccb32ca05224ed7a0c8b70255e223aac21b84a2c8ffa664111ea362b7476df685591add290463238ee5cc74227cf3a3c45b

Download Submit
/data/user/0/com.ohalqpdj.discopet/databases/database.db-wal

Filesize
24KB

MD5
0662faffcd32eee2d2a19c62c4c582ad

SHA1
42becfa3965773fce970a68cc6610b0e62b051d5

SHA256
208f19962bfa10a4fd3143111f3e75da16abbe0bb769532fea41e05029874a91

SHA512
6eda19148f87a443e557670d2e2568ae5e36fbd79c9b8a5ea8b2b23a7379e1d1d515d71169fa47ceb4f89719b428aa4f80cb0a14ac7b7972311ed2bbb5db7ebc

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

Filesize
152B

MD5
552ae0cff8e388bd4d979c1111ae17b1

SHA1
d99571e9e5c34fe91ef06033a20eb2c3daa1d89e

SHA256
2560dc76d974006736c5b26f0590c5940c1497842ff5525e8ac81fa4170d8007

SHA512
65759c98c79ef7e23462c8ad4cac97c391db3c9012e17fd50a762c5609964fcbe6bfac4508e62da3cadb3ba1de946fb1c85add15ac611584c9b5a079e3fcac29

Download Submit
/data/user/0/com.ohalqpdj.discopet/shared_prefs/preferences.xml

Filesize
398B

MD5
bf3a6ed0414afad23f1f232fd546af7c

SHA1
f19564000afd04ea65a4567539e53a576fa56935

SHA256
4512f5f91b2fc7629996de8d1e0fae86c873e55527cfe4a8bc1dc7476012b3a4

SHA512
e5cabfaff8216258a965e6bb70f12ed147fb470ddada7b24902608100a506e6e728c7670bba831eb9376cf56b1561d130e24b5a9af9c67387a50af050ff6ba70

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads