Analysis

  • max time kernel
    3283626s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    16-06-2023 07:33

General

  • Target

    Grab n Go v3.7.apk

  • Size

    19.7MB

  • MD5

    ccbc2a0abbdfce80a13f854ce1789bf5

  • SHA1

    ad78bd2da5c834148a3861e933441f8aee3c3963

  • SHA256

    28cbe66711c9de9e1a6955b84bab56fe5b079798d77cc55836a8bd5dca49593f

  • SHA512

    27391fa9c7e34b9003f60c05eb1dc282c8ecb7e6475ba960e2d1120a84f70267eb6476f26f34f799c2aa31015591104408923851c1932717d45ae2f65926d28f

  • SSDEEP

    12288:QP/KtPH3eWTJ0ZB+4MzsrMFFEXD3SMDWrn2o2yBoder98sr/ZfzhYLTE:QiPO+eZJoFFqGMDWrn2kTr77WfE

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • boards.instruction.ensure
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4078

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/boards.instruction.ensure/shared_prefs/ProtectedApps.xml

    Filesize

    128B

    MD5

    214fb59450fb63c2eba0eb00cbef71bb

    SHA1

    d55306c66d10c8256ced135b9a245fb3de50b096

    SHA256

    29cd87115f57a3d714e8f666d08c6d1bd53fd644a77b8172dfa29ac2aea1bf46

    SHA512

    83c6d8af079e1224d78056316e5bebc3947871194afe325493599131b82fc6a381cc7c72ab93378ddcca3ab6b5ed9c14c6da2e73086e29d48c6dafa550a1622b

  • /data/user/0/boards.instruction.ensure/shared_prefs/boards.instruction.ensure.xml

    Filesize

    146B

    MD5

    e0ae18ee51f8080061f538d00a4a2b1f

    SHA1

    b39e93a0da5a827e9154142070e5eb93eb2a6314

    SHA256

    cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee

    SHA512

    646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e