Overview

overview

10

Static

static

10

bradesco.apk

android-9-x86

8

bradesco.apk

android-10-x64

6

bradesco.apk

android-11-x64

8

Analysis

  • max time kernel
    2751087s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    21-04-2023 13:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bradesco.apk

  • Size

    1.3MB

  • MD5

    0e69fd9ea5ddfda38a1d73621def19a3

  • SHA1

    2a7a8d1219b66db2f5ed3c5af0043460597f4286

  • SHA256

    2f922df9bde2e816064bbc23c5e4d4ec833f8f0d822c0f097f3b584ec81df032

  • SHA512

    a03496b473741ec33cf35fe89e6601254b15614ff5f0e83ba9acd3e231d25b8f4b8a44c7272fc811e1be1e08f9f45a9b444c5b75eea7b262251d57679f54c3b8

  • SSDEEP

    24576:Xj3n7M/NASUj+VX1sTNq/NOLvfHhf6Hfsp4HUj/k:XjLM1nbsxqQ3HhmfspJjs

Score
8/10
evasion

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
    evasion
  • Removes a system notification. 1 IoCs
    evasion

Processes

  • keen.cache.explosion
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4064
  • keen.cache.explosion:remote
    1⤵
      PID:4549

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/keen.cache.explosion/shared_prefs/ProtectedApps.xml
      Filesize

      128B

      MD5

      214fb59450fb63c2eba0eb00cbef71bb

      SHA1

      d55306c66d10c8256ced135b9a245fb3de50b096

      SHA256

      29cd87115f57a3d714e8f666d08c6d1bd53fd644a77b8172dfa29ac2aea1bf46

      SHA512

      83c6d8af079e1224d78056316e5bebc3947871194afe325493599131b82fc6a381cc7c72ab93378ddcca3ab6b5ed9c14c6da2e73086e29d48c6dafa550a1622b

      Download Submit

    • /data/user/0/keen.cache.explosion/shared_prefs/keen.cache.explosion.xml
      Filesize

      146B

      MD5

      e0ae18ee51f8080061f538d00a4a2b1f

      SHA1

      b39e93a0da5a827e9154142070e5eb93eb2a6314

      SHA256

      cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee

      SHA512

      646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e

      Download Submit