Overview

overview

8

Static

static

7

b6249fa996...fd.apk

android-9-x86

8

b6249fa996...fd.apk

android-11-x64

8

Resubmissions

06/06/2023, 13:19

230606-qk2ehsec9z10

11/01/2023, 09:41

230111-lntfvsff3y8

Analysis

  • max time kernel
    2684288s
  • max time network
    83s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    11/01/2023, 09:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk
  • Size 11.5MB
  • Sample230111-lntfvsff3y
  • SHA256 b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
evasion

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 3 IoCs
  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion

Processes

  • com.pdffiller.l2f
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4043

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Web Data
        • Path /data/user/0/com.pdffiller.l2f/app_webview/Web Data
        • Size 104KB
        • SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.pdffiller.l2f/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 33fc32fd618d4afe707a169e977fe3cf969003eb82d90f6d7ba26e87ccfd15de
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/com.pdffiller.l2f/app_webview/metrics_guid
        • Size 36B
        • SHA256 8a6a26157907c04765c7de8276c5fe15f58d2f79ddecb0ffec732f2c85d08ee0
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
        • MD5 SHA1 SHA512
        Submit Download

        com.pdffiller.l2f_preferences.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/com.pdffiller.l2f_preferences.xml
        • Size 166B
        • SHA256 8300e9295420e9621c996b1e23bdc1c65a6707f72e12b73309667f7762917f50
        • MD5 SHA1 SHA512
        Submit Download

        config.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/config.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512
        Submit Download