Overview

overview

8

Static

static

7

b6249fa996...fd.apk

android-9-x86

8

b6249fa996...fd.apk

android-11-x64

8

Resubmissions

06/06/2023, 13:19

230606-qk2ehsec9z10

11/01/2023, 09:41

230111-lntfvsff3y8

Analysis

  • max time kernel
    2687967s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    11/01/2023, 09:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd.apk
  • Size 11.5MB
  • Sample230111-lntfvsff3y
  • SHA256 b6249fa996cb4046bdab37bab5e3b4d43c79ea537f119040c3b3e138149897fd
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 3 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • com.pdffiller.l2f
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests enabling of the accessibility settings.
    PID:4250

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Web Data
        • Path /data/user/0/com.pdffiller.l2f/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.pdffiller.l2f/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 3150584f323bf80563333d28dce3a951963eb82a8654bd7dfc027c15a95e2b55
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.pdffiller.l2f/app_webview/webview_data.lock
        • Size 23B
        • SHA256 94ac8017c95541b975a494d1b2049244d942ec30c94d6c49f3604a5ba54e92dc
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 a90991c92eee85190979417b3907fb3b3f60f89ba2e09012d7a1433f932dee4b
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 38fcd137000ab8e2efcb871a79990129dec88431d663d4d1e2d7c80cba4a4332
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 06ae051367678381df119e01787ef889ccee2c6728f7c2da53d531cccc4a2036
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.pdffiller.l2f/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download

        com.pdffiller.l2f_preferences.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/com.pdffiller.l2f_preferences.xml
        • Size 166B
        • SHA256 8300e9295420e9621c996b1e23bdc1c65a6707f72e12b73309667f7762917f50
        • MD5 SHA1 SHA512
        Submit Download

        config.xml
        • Path /data/user/0/com.pdffiller.l2f/shared_prefs/config.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512
        Submit Download