b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd

Resubmissions

06-06-2023 13:19

230606-qk2ehsec9z 10

11-01-2023 09:41

230111-lntfvsff3y 8

Analysis

max time kernel
2684288s
max time network
83s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
11-01-2023 09:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk
Size

11.5MB
MD5

7e061e87f9a4c27bfb69980980270720
SHA1

34d37927b35f422e7c28055ea989ef6524a668ef
SHA256

b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd
SHA512

aa7fc96da1040e1c97c522bc23e2a84c7684813185289cde4ff57937b11b7866ad5ea5a87df19fe7dbd090b18efb1540146380f4e91fd2104e0cf15e0e5545fd
SSDEEP

196608:HNQ+EyaHv2Dl1bQ6x49K6MoJzMHWjfd/7LbDRtUlCv1phj2oIK1Dfo:H4DHv2vme04HafVLDRKlCv1phj2FK1ro

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.pdffiller.l2f
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.pdffiller.l2f
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.pdffiller.l2f

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.pdffiller.l2f

Reads information about phone network operator.

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.pdffiller.l2f

com.pdffiller.l2f
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Removes a system notification.
PID:4043

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.pdffiller.l2f/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.pdffiller.l2f/app_webview/Web Data-journal

Filesize
1KB

MD5
57435ed1bd60dbbc87782676f49fb496

SHA1
ecc35fb814a4c999e0c3a7928083e44cb8e5a24c

SHA256
33fc32fd618d4afe707a169e977fe3cf969003eb82d90f6d7ba26e87ccfd15de

SHA512
ae400d697da5783b9df21987a9dc6c02e4ffa6af01912be13b2576e63ee2c43812fb3420625bd9725f1e199319ef925b3bb409b4e166662ba2b6c401c646fb26

Download Submit
/data/user/0/com.pdffiller.l2f/app_webview/metrics_guid

Filesize
36B

MD5
757a1847a0b8c5b35486b914318a125d

SHA1
c0e2d9da4453c0cb779e9c4167f72b7141ac415f

SHA256
8a6a26157907c04765c7de8276c5fe15f58d2f79ddecb0ffec732f2c85d08ee0

SHA512
7d1f1ce1a04d421b78f11477a0225e3127c7d44ad32022f3a5010e5219b103aacd37b619ee45ea5b0a7c71319006cd6cadcdf509a9de3b6c397f0b8bbbb62916

Download Submit
/data/user/0/com.pdffiller.l2f/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.pdffiller.l2f/shared_prefs/com.pdffiller.l2f_preferences.xml

Filesize
166B

MD5
9f47baf3a9a6194affde23f6045a061d

SHA1
5f7777d88f68d11406d777a6221b79c66de22837

SHA256
8300e9295420e9621c996b1e23bdc1c65a6707f72e12b73309667f7762917f50

SHA512
cf224e18a29b3794f07cf96cdb1bbaf1ddaa6c56867429b02e93a173f262377721244383c2aad24ed46c6e9411e0ad8f4fdd7828de7c45c561fabb01836f9348

Download Submit
/data/user/0/com.pdffiller.l2f/shared_prefs/config.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads