Analysis

  • max time kernel
    3273240s
  • max time network
    74s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27-04-2023 14:22

General

  • Target

    ready.apk

  • Size

    2.7MB

  • MD5

    fa80b70717ba59584e8012d00aeee26d

  • SHA1

    4bd15f8592018e84a5dd80d2c8e1f53b84e536a4

  • SHA256

    df1985308e4cba63ad8b42f746443ab0df1ad240b7edb628e6d44cfa64799a2a

  • SHA512

    30ecb79fd750a063311346c0ae280825789ce2041ab4edc19320697b4fe6a137b26240751b9ecd0c7df74a82ccaef0f6b20597d21d8e3523c0aced34d2411c4e

  • SSDEEP

    49152:NbF1MIp8lMlTRaJdSIjAfZOb29BKN9dALbQ7R4ChN/3IKxOSheLz5cA:NbF7p86lNauU6ZOb290GLbdChPOftcA

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • edges.diagnostic.official
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4243
  • edges.diagnostic.official:remote
    1⤵
      PID:4745

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/edges.diagnostic.official/app_webview/Default/Web Data

      Filesize

      120KB

      MD5

      a48cd9324b1f8754b07f00d863b840f3

      SHA1

      11c6614775b35a58f440971dfc87c8aaac6d6173

      SHA256

      8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

      SHA512

      35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

    • /data/user/0/edges.diagnostic.official/app_webview/Default/Web Data-journal

      Filesize

      2KB

      MD5

      fc49d0823aa46d49c51fc24054619d2a

      SHA1

      7a2f689b746e6a014f6eb77b3ff3e181dfa1ac7f

      SHA256

      94532114c507077798207128257ea5b15efcf17196f6e4b4cfbfded125e3589c

      SHA512

      28755bfe206c7668d683ecf07c6e6ab72ce8902fbfefc08cda01feec1c01318b45ce3ddcc85a166762ba349451adc039b0cb15ca811a785dc2f6703c616d7e0d

    • /data/user/0/edges.diagnostic.official/app_webview/webview_data.lock

      Filesize

      31B

      MD5

      4d757d670203ea47db14065836f6e527

      SHA1

      a648a4b0c2863780a55577ddd039ad5186d80e13

      SHA256

      3989440943be874a55d72b2e3223fdb117c159c15f4956c7df4df745fdd3b444

      SHA512

      292df34d7d327861734e55b3a103d291cdb0d5dba3dcabb2809f50cc3574101597750ae59c2bbb93262013e399c7d386a05c3da6f0213377cd0451bc6fa5914d

    • /data/user/0/edges.diagnostic.official/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      d8daeffa3fb79a2327b9722cde17b23c

      SHA1

      9dfd5e4667e79c9b15c5f50d833c471aecb63f61

      SHA256

      73ec10d7e27565eea1fce9285627bdad6bc31f523ac57cc3eab6ddc337d682e4

      SHA512

      c9279a401e56242c86fc8c9d2ba32cdca1d3bd16f5e398e566157b63a4d5da097ca43721f9c2c8290c774f819e8c1cda8cf2800aa5b6a8b6ceaa33539abdbdd4

    • /data/user/0/edges.diagnostic.official/cache/WebView/Default/HTTP Cache/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/edges.diagnostic.official/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      cdab36e1c0e0648f78ab6f3f1360b116

      SHA1

      f003f537435259117c4314e2f36d64fd163ef412

      SHA256

      defda8183025ce6bf3c8c7f99cd185babf3af8aba798178f311e685a56e41b93

      SHA512

      a5612dad49eccb947927b05297001e536855c61e308e6a15852fc579906d68b21039e5f516c56efda94d9705becc86703d3398afe9525afb857a63f32e938cc3

    • /data/user/0/edges.diagnostic.official/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/edges.diagnostic.official/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

      Filesize

      96B

      MD5

      14b3ea97c3538ecfd6c849b1e8ac0601

      SHA1

      fc622e38ba1454eb28dc51b201c575e39a605a7b

      SHA256

      4054e020506b6a8447f5c7cda2d7bb34e040f050e443b2a8ab2554c1419c3d5f

      SHA512

      97385ee0fa09512218e458a6dbbb537423dfdff0d85637cfd49659ae4a4dbd53b80af2d1630c07aa2bd503c423d3dbffd7c92c9303dab0c5840bfefc28ee2832

    • /data/user/0/edges.diagnostic.official/cache/WebView/font_unique_name_table.pb

      Filesize

      57KB

      MD5

      f080fa2a56ab5479d58063e5ea871447

      SHA1

      4b3fd57a98916fa5784305b76ba30af26b5253d9

      SHA256

      0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

      SHA512

      8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

    • /data/user/0/edges.diagnostic.official/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      97ccd9a2b2063143df56b6937f961ca4

      SHA1

      5e78a91ae5df289ce83443cb7d5589dd3504fb5d

      SHA256

      248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

      SHA512

      86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

    • /data/user/0/edges.diagnostic.official/shared_prefs/edges.diagnostic.official.xml

      Filesize

      146B

      MD5

      e0ae18ee51f8080061f538d00a4a2b1f

      SHA1

      b39e93a0da5a827e9154142070e5eb93eb2a6314

      SHA256

      cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee

      SHA512

      646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e