Analysis
-
max time kernel
1621389s -
max time network
158s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
10-11-2022 08:22
Behavioral task
behavioral1
Sample
1667994740620.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
1667994740620.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
1667994740620.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
1667994740620.apk
-
Size
2.5MB
-
MD5
a380e4a77ec9dce9a4c22d25c12dffab
-
SHA1
ce4b6ed7abb627cc843d99533f71634061b1b1c6
-
SHA256
3e985fb33ddc22af85982b7063f4eedb5b69b8b7162292b6c082fa2d55b12a1d
-
SHA512
88adaede1b98abf9d7d954e184514262b72f8c176c1f009403aefb46e11fa336ce73f6d931862d260a884d18e0d465ac81095aaab96a58e254164dc3d7a53ac2
-
SSDEEP
49152:PR/ZD/hr1OPLEdrSmDkokeTIVpHA8l90TGFMGbn9gt09:pRD/GPLydBIvHJj0TGuGhgts
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.app.apk.bnltoken -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.app.apk.bnltoken -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.app.apk.bnltoken/app_securecache/unrar.jar 4538 com.app.apk.bnltoken -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.app.apk.bnltoken
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
113KB
MD58031ce709efa1bcc362d2df92c174973
SHA1f6574d9cb83bc981fa452c2a5248bd94c56d864a
SHA2566ae59043e3da1afc899c6548a4a301c7bc8ae91695723dc0d9efc223caadc1c2
SHA512aae67a60fb702ab336b589c5a4fcb87ed4eed6a40e9bd606e71a1975dba1a9a6ea2047ac17d9a1db2de9be0288413f884288f7e1077f0ec6098f1b7c426f328d
-
Filesize
527KB
MD5ab67d89f3ec1498417391c49d2bec9bf
SHA10d0861de6a1d7a3273f9f6455d2b9c10f2108534
SHA2561bf58235c5ee396d67adc2e6c57ff63e63266173bc59136383147fc80d59596a
SHA51234be3008548631b3d9d597e5c0d6022ad2c6c428dd87028de6e3c7a1d2a6c3918d1aee81cc4c6b19358a1ef80f9313e5532d257ca2e9b034a3294233f5547130
-
Filesize
98KB
MD53f11cd6842256acb42da1702bfb10285
SHA1ea1a4d5d22bc74e48644279a07961f32b2239770
SHA2568a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951
SHA512cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd
-
Filesize
98KB
MD53f11cd6842256acb42da1702bfb10285
SHA1ea1a4d5d22bc74e48644279a07961f32b2239770
SHA2568a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951
SHA512cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd
-
Filesize
322B
MD56d5eb871c2b386302d068b702e5748af
SHA1b7e16b2236fe6c65ecb35bd9abc7177d7dd61393
SHA256f734c739056d943364815b187d8baf149bd006cc81267430b9010486361325c6
SHA5126871985f14a1fdd1cb87cc3a70db562b0d68edb5d3206363434c2df7eb47a9741ff55845067b55963e55a8864e96217862e2eed3a74b8815d3697389f3355c58
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
8KB
MD59a7f3389cf225c38519f34b1e4fff4e8
SHA1f011af30d5cf5a4cd15b0d82b0c00ff1a4c5952f
SHA256bf1be95566105ea42392d0c06a2bd06e6ca724e9c8a5f5cd818813b178821378
SHA512451936320e988c03a84aa6cbb0d2dc6c738eedc135114690e980908a39a0f86867799881bd09faf8843c5b34d57d7a356992d476ac6858083fe5c74600fdefa8
-
Filesize
98KB
MD53f11cd6842256acb42da1702bfb10285
SHA1ea1a4d5d22bc74e48644279a07961f32b2239770
SHA2568a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951
SHA512cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd
-
Filesize
12KB
MD5e7179ba1abb576a1eb3486db34de4037
SHA14dc87664c9be3d7a94d4886b7f56f4a8d7b983dd
SHA256409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f
SHA51250ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a
-
Filesize
17KB
MD5d26cc13baade526182fbe9c37c630819
SHA11d40e440e6f64d6509c6767a875f5d0ec0094e39
SHA256e7e252dc3a6204d91d1eeeba6f4a59072fbd30cab8afd98a1944682b9e154d54
SHA51261ab4c045a3b641b237f299fcebf3722ee1fab722bde25044bff66a86b4a33a816a890e76685f0220ff86c12b734969a55d912a99b39eeed8582a381986b8cc4
-
Filesize
8KB
MD557a39108426ea4fb8e5bc74accc22a88
SHA173f83c87418acba44a084cb7055fc5c34f6cf25e
SHA2569d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2
SHA512f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a