Resubmissions

23/12/2022, 07:38

221223-jgc47agb42 8

Analysis

  • max time kernel
    1035419s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2022, 07:38

General

  • Target

    93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572.apk

  • Size

    5.8MB

  • MD5

    c5d12034694e80115e8e0fb599ae4718

  • SHA1

    ac75884b3a8bd38bd3ffd759fa18a2583e7fe9d2

  • SHA256

    93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572

  • SHA512

    9f643a2966f0e21a12be11af1af3e905d73b8496eb09f31e124de0b177cb3bb3bed5339c77744852383bf2e351146420bbb4c7e2216389bb53b87f51a8f48fe4

  • SSDEEP

    98304:+KWd2TBIwrYnhzd1gks9rAkq4JBJJfWemcmHetXbIJhiwG9ZLkzZIdyErazfr9Ca:bJYh7u98ktzTZMetXbcQ9ZoFIdyUkBVv

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 3 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.emo.radyodinle
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests enabling of the accessibility settings.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.emo.radyodinle/shared_prefs/com.emo.radyodinle_preferences.xml

          Filesize

          166B

          MD5

          9f47baf3a9a6194affde23f6045a061d

          SHA1

          5f7777d88f68d11406d777a6221b79c66de22837

          SHA256

          8300e9295420e9621c996b1e23bdc1c65a6707f72e12b73309667f7762917f50

          SHA512

          cf224e18a29b3794f07cf96cdb1bbaf1ddaa6c56867429b02e93a173f262377721244383c2aad24ed46c6e9411e0ad8f4fdd7828de7c45c561fabb01836f9348