Resubmissions

12-10-2022 15:18

221012-spwe6shag7 10

12-10-2022 15:09

221012-sjqmqsggb6 10

Analysis

  • max time kernel
    3435719s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    12-10-2022 15:18

General

  • Target

    YouBPM.apk

  • Size

    2.2MB

  • MD5

    ee23125ea3705e29fa7b65b7ca56332d

  • SHA1

    cbaff95d22f3d57e5594227540e22bed567aa5c7

  • SHA256

    f19655d4f913b025d46931b4d7fb2333aad5314fc43922b1a27050148b23f0d7

  • SHA512

    f0afd9bf914d26a2648f6980a4f4ad000dcdc46f5515f23238e8ecf777541ee9711f062d9731fa665168a35f42788c8e90a5b47334d2a6f576271eb940609eef

  • SSDEEP

    49152:9//ynqaX+FnfpIHNcJGg037h3Dhjcff1qZxIsK9ELdqpM/li:9/Kqjf2Hc037FDhjcoEseiQpMo

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • koala.aperr.xuup
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests enabling of the accessibility settings.
    PID:4122

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/koala.aperr.xuup/files/_trv

    Filesize

    12B

    MD5

    abdbb534c848c7edfb4a407c25b29902

    SHA1

    62380bdc3037cb5df6c3fb780aaf53073506ba31

    SHA256

    dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4

    SHA512

    506edaee43849f8ee043930f13b45f53b80d783bb9fa1b9393fe32e0ddea61f5cb31a57d4d1b811a0d2fc6d15dcc0a8f7b1aedd288af328e032ed25884c14bbd

  • /data/user/0/koala.aperr.xuup/files/a11y

    Filesize

    8B

    MD5

    2e5d8aa3dfa8ef34ca5131d20f9dad51

    SHA1

    3cc1d5a427a45820b04fe30f78a972b784952460

    SHA256

    cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1

    SHA512

    a0527c1de9df8c529337f73be73cf98fcde155fcf00c7522f67a4a6298b52853d9767815d8811c2a7e5e829871a5dea9174b2b7e90fb7c98a62467240dd78434