c288ed7987f6116dadd9ebe1a92c9b13b156f010331e8465db2e740299ee3091

Analysis

max time kernel
2709154s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
02-03-2023 08:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1677590406642.apk
Size

2.6MB
MD5

3fe1e782cbc444c29664bfe412e6021a
SHA1

9936c2061c8b1e2d4415abfda2148c3edbf6b305
SHA256

c288ed7987f6116dadd9ebe1a92c9b13b156f010331e8465db2e740299ee3091
SHA512

8f9abe32c6b8cb85e314a4f5a77d21d0025346f93b5493df5163991c2d15b10742b2a4d58e02b96837905941be73ed464fa6ed3fca0855f3f19275daffc13b19
SSDEEP

49152:y17+0ZAskvYsdM59CKUjO8ZtZ6FAVYRJCbaBCZrkOusJ4DkrrHrvi:aaekvYMQ93UFLZAgGMRkOuBArrHrK

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service. 1 IoCs

Processes:

com.ahora.caixa

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.ahora.caixa

Acquires the wake lock. 1 IoCs

Processes:

com.ahora.caixa

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.ahora.caixa
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.ahora.caixa

ioc pid process

/data/user/0/com.ahora.caixa/app_securecache/unrar.jar 4522 com.ahora.caixa
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.ahora.caixa

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.ahora.caixa

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ahora.caixa

ioc	pid	process
/data/user/0/com.ahora.caixa/app_securecache/unrar.jar	4522	com.ahora.caixa

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.ahora.caixa

com.ahora.caixa
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
PID:4522

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.ahora.caixa/app_securecache/oat/unrar.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.ahora.caixa/app_securecache/unrar.jar
Filesize
113KB

MD5
0ed6b8ec70ab22c5f67663e68ce4d98b

SHA1
5f8addc17f5053787d37ad0c54a8d68986d5d1ac

SHA256
914d6856a065ece157253d4f7a1330dabcb0b6a42ed104a4008c63fb870881cd

SHA512
c4fc55221d7df0934f0492299039dca57aaea50f61847735c3a1d339efa046db5b467a207a098fb73f60e6a9eb4f154ab7e5ac4aa4077b4d9bea7466cfd26620

Download Submit
/data/user/0/com.ahora.caixa/app_securecache/unrar.jar
Filesize
528KB

MD5
12ef9a9f82df6de45fe745ec6a479836

SHA1
95a8bd8ccfc2e26841db7c2a607104f25a97e007

SHA256
b7932a5d1f91b400fc0a044b4f87684b152d81601596863ef8d61cfdcb09f38c

SHA512
c1c0db060815c6b49c43dc29f596b69b1783b29a9a347f91025879bfa626a698168b817b0c308c8303a9763729c2ddf94119d18a2bc5eb37a49d4ec9a1d60232

Download Submit
/data/user/0/com.ahora.caixa/app_securecache/unrar_enc.zip
Filesize
98KB

MD5
28989be97e2542590a0776ddd4fb9f51

SHA1
2aa3e760aa30dc90e75993a93364ec6199a5beeb

SHA256
7d0794161b09ecf9ab4ace397ae1bf309fef3f54656412dc2742a51ff72c0dc6

SHA512
20e17c7481cf1fb771cafd8f68197a70b9730908f032767d41a9a1b7cf50eaa35f93d6f9f4e4ea83a0e741d5b1606245e26ff263ba6990c13f0ceecebbea595b

Download Submit
/data/user/0/com.ahora.caixa/cache/1
Filesize
98KB

MD5
28989be97e2542590a0776ddd4fb9f51

SHA1
2aa3e760aa30dc90e75993a93364ec6199a5beeb

SHA256
7d0794161b09ecf9ab4ace397ae1bf309fef3f54656412dc2742a51ff72c0dc6

SHA512
20e17c7481cf1fb771cafd8f68197a70b9730908f032767d41a9a1b7cf50eaa35f93d6f9f4e4ea83a0e741d5b1606245e26ff263ba6990c13f0ceecebbea595b

Download Submit
/data/user/0/com.ahora.caixa/cache/2
Filesize
318B

MD5
23d9d8fe02cb16c2b7825ee46f3a61af

SHA1
e607151cb81198b73c643bdb531ad9e4e922312f

SHA256
9dc5e8b97df26afc918e440c35974795af248aae6ff43fb27ea9c84f53279829

SHA512
c0682045404eb8bf18f662c11229a7c3e7576785360659d83f85c05edc9971246f72947fe98aea1f22469e821a49aed2c7d34510ac6e0aeca5115e882d20b98d

Download Submit
/data/user/0/com.ahora.caixa/cache/~test.test
Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/user/0/com.ahora.caixa/files/dbkeys.db
Filesize
8KB

MD5
9a7f3389cf225c38519f34b1e4fff4e8

SHA1
f011af30d5cf5a4cd15b0d82b0c00ff1a4c5952f

SHA256
bf1be95566105ea42392d0c06a2bd06e6ca724e9c8a5f5cd818813b178821378

SHA512
451936320e988c03a84aa6cbb0d2dc6c738eedc135114690e980908a39a0f86867799881bd09faf8843c5b34d57d7a356992d476ac6858083fe5c74600fdefa8

Download Submit
/data/user/0/com.ahora.caixa/files/gvcrfRK.zip
Filesize
98KB

MD5
28989be97e2542590a0776ddd4fb9f51

SHA1
2aa3e760aa30dc90e75993a93364ec6199a5beeb

SHA256
7d0794161b09ecf9ab4ace397ae1bf309fef3f54656412dc2742a51ff72c0dc6

SHA512
20e17c7481cf1fb771cafd8f68197a70b9730908f032767d41a9a1b7cf50eaa35f93d6f9f4e4ea83a0e741d5b1606245e26ff263ba6990c13f0ceecebbea595b

Download Submit
/data/user/0/com.ahora.caixa/files/localdb.db
Filesize
12KB

MD5
e7179ba1abb576a1eb3486db34de4037

SHA1
4dc87664c9be3d7a94d4886b7f56f4a8d7b983dd

SHA256
409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f

SHA512
50ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a

Download Submit
/data/user/0/com.ahora.caixa/files/localdb.db-journal
Filesize
17KB

MD5
2b108ff89a65178121cd9bead239a0eb

SHA1
da1169821f585026202ceca60a935c609d6347d6

SHA256
41872ddfc57882b500ef4596bd1120bb5ba6ded7223d71d99e6f3d52edc30531

SHA512
c101c7afe0f7480049930e92ee15037e5f41c2068a3aae78a71f92da00dc74c08a7351942d166969254fdb5d0a9dc11162d7f7cbd24f18a018e7b67a5ee1a400

Download Submit
/data/user/0/com.ahora.caixa/files/messdb.db
Filesize
8KB

MD5
57a39108426ea4fb8e5bc74accc22a88

SHA1
73f83c87418acba44a084cb7055fc5c34f6cf25e

SHA256
9d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2

SHA512
f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a

Download Submit