Resubmissions
01-12-2022 08:49
221201-krdn5sfe7z 1001-12-2022 08:46
221201-kpdalafd3z 1001-12-2022 08:29
221201-kdts7sed6y 10Analysis
-
max time kernel
3437437s -
max time network
150s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
01-12-2022 08:49
Behavioral task
behavioral1
Sample
sicurezza.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
sicurezza.apk
-
Size
3.1MB
-
MD5
b3d4ebb4fa9bdde93b7b6432306e3239
-
SHA1
1e243e5fe16052e04f3361d385bc5f3a94bbfe61
-
SHA256
5137c0a3e36b4209fa79284490002f4cd1499c5779aabde4f8dc5b07c41c8942
-
SHA512
e87184ab265e158935c76b17473dc2dd7b3a5de15d9726cf24c203316296a02821983d6907ce91ed1659f2014debbed6b851924d912c3d8e4aebf06e9a7e4e5f
-
SSDEEP
49152:2tt0vK9T/SjBKWZ9aQ8VbzHSyLtMobV6DTJMNx6Sx1CDqSK3qp1/sMMxR1QSk:2tt0yx/kc9HRX6DqQDDKap4R1QP
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
Processes:
it.opeer.feprttdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId it.opeer.feprtt -
Acquires the wake lock. 1 IoCs
Processes:
it.opeer.feprttdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock it.opeer.feprtt -
Requests enabling of the accessibility settings. 1 IoCs
Processes:
it.opeer.feprttdescription ioc process Intent action android.settings.ACCESSIBILITY_SETTINGS it.opeer.feprtt
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12B
MD5abdbb534c848c7edfb4a407c25b29902
SHA162380bdc3037cb5df6c3fb780aaf53073506ba31
SHA256dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4
SHA512506edaee43849f8ee043930f13b45f53b80d783bb9fa1b9393fe32e0ddea61f5cb31a57d4d1b811a0d2fc6d15dcc0a8f7b1aedd288af328e032ed25884c14bbd
-
Filesize
8B
MD52e5d8aa3dfa8ef34ca5131d20f9dad51
SHA13cc1d5a427a45820b04fe30f78a972b784952460
SHA256cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1
SHA512a0527c1de9df8c529337f73be73cf98fcde155fcf00c7522f67a4a6298b52853d9767815d8811c2a7e5e829871a5dea9174b2b7e90fb7c98a62467240dd78434