Analysis

  • max time kernel
    2989262s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    24-04-2023 07:28

General

  • Target

    Nubank.apk

  • Size

    1.3MB

  • MD5

    aab37e8b19fc0e9e353826fc10cb05e5

  • SHA1

    9d28946e983ffd822ada31cdcdd4e4826e90601e

  • SHA256

    8c365bd58edeb2ca371ead5e28350ee6c480a79f558d967ecbef525e9f1d7b3e

  • SHA512

    34d486c45c77f6972602ada81bce83e234cddbcbc2452b0e47f92210502e4c96f72ca46d322c0468a74af0afcbe5eb2f0bd13de3e5153111355c964cec9e92e2

  • SSDEEP

    24576:BU5foaB8Enn+o03RkcVp+fAv3UoiiTz05AYyp14m:MVy6+t3RkcVp0Gmin05cpSm

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • meter.manage.conceptual
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4266
  • meter.manage.conceptual:remote
    1⤵
      PID:4753

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/meter.manage.conceptual/shared_prefs/ProtectedApps.xml

      Filesize

      128B

      MD5

      214fb59450fb63c2eba0eb00cbef71bb

      SHA1

      d55306c66d10c8256ced135b9a245fb3de50b096

      SHA256

      29cd87115f57a3d714e8f666d08c6d1bd53fd644a77b8172dfa29ac2aea1bf46

      SHA512

      83c6d8af079e1224d78056316e5bebc3947871194afe325493599131b82fc6a381cc7c72ab93378ddcca3ab6b5ed9c14c6da2e73086e29d48c6dafa550a1622b

    • /data/user/0/meter.manage.conceptual/shared_prefs/meter.manage.conceptual.xml

      Filesize

      146B

      MD5

      e0ae18ee51f8080061f538d00a4a2b1f

      SHA1

      b39e93a0da5a827e9154142070e5eb93eb2a6314

      SHA256

      cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee

      SHA512

      646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e