Analysis
-
max time kernel
3283626s -
max time network
154s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
16-06-2023 07:33
Static task
static1
Behavioral task
behavioral1
Sample
Grab n Go v3.7.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Grab n Go v3.7.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Grab n Go v3.7.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Grab n Go v3.7.apk
-
Size
19.7MB
-
MD5
ccbc2a0abbdfce80a13f854ce1789bf5
-
SHA1
ad78bd2da5c834148a3861e933441f8aee3c3963
-
SHA256
28cbe66711c9de9e1a6955b84bab56fe5b079798d77cc55836a8bd5dca49593f
-
SHA512
27391fa9c7e34b9003f60c05eb1dc282c8ecb7e6475ba960e2d1120a84f70267eb6476f26f34f799c2aa31015591104408923851c1932717d45ae2f65926d28f
-
SSDEEP
12288:QP/KtPH3eWTJ0ZB+4MzsrMFFEXD3SMDWrn2o2yBoder98sr/ZfzhYLTE:QiPO+eZJoFFqGMDWrn2kTr77WfE
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId boards.instruction.ensure Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId boards.instruction.ensure -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock boards.instruction.ensure -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS boards.instruction.ensure -
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag boards.instruction.ensure
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128B
MD5214fb59450fb63c2eba0eb00cbef71bb
SHA1d55306c66d10c8256ced135b9a245fb3de50b096
SHA25629cd87115f57a3d714e8f666d08c6d1bd53fd644a77b8172dfa29ac2aea1bf46
SHA51283c6d8af079e1224d78056316e5bebc3947871194afe325493599131b82fc6a381cc7c72ab93378ddcca3ab6b5ed9c14c6da2e73086e29d48c6dafa550a1622b
-
Filesize
146B
MD5e0ae18ee51f8080061f538d00a4a2b1f
SHA1b39e93a0da5a827e9154142070e5eb93eb2a6314
SHA256cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee
SHA512646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e