Resubmissions

17-08-2023 05:48

230817-ghw8cafd95 10

31-07-2023 10:08

230731-l58bcafc71 8

Analysis

  • max time kernel
    2876089s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    31-07-2023 10:08

General

  • Target

    certapp-1.apk

  • Size

    3.9MB

  • MD5

    291c24d9b3f4a5793a2600610671eb42

  • SHA1

    6a1aa5db36df20a667a0e58d89a4fcdcddf068f4

  • SHA256

    7a16952bea9714cad6330960898edf6262c0e5e19d0b47716e31b6cc24463e07

  • SHA512

    b1800eddcd0d1942ff248d5f260af63ec69ad269cf2962b0818718c45dcb63347dfb9fd7ed0695170d293113536c7fa4522d5b0d2109181404dab34d64a3ea5d

  • SSDEEP

    12288:W12xH02TTyN1BYJoQDRLS4YiugstQYvvcZYF7xQTqiecs8uzvtelYxp8cmO87bYv:W41TNo+hrYiugEp3cZGi2JIYpgqv

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • in.titanium.cooked
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4101

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/in.titanium.cooked/shared_prefs/ProtectedApps.xml

    Filesize

    128B

    MD5

    214fb59450fb63c2eba0eb00cbef71bb

    SHA1

    d55306c66d10c8256ced135b9a245fb3de50b096

    SHA256

    29cd87115f57a3d714e8f666d08c6d1bd53fd644a77b8172dfa29ac2aea1bf46

    SHA512

    83c6d8af079e1224d78056316e5bebc3947871194afe325493599131b82fc6a381cc7c72ab93378ddcca3ab6b5ed9c14c6da2e73086e29d48c6dafa550a1622b

  • /data/user/0/in.titanium.cooked/shared_prefs/in.titanium.cooked.xml

    Filesize

    146B

    MD5

    e0ae18ee51f8080061f538d00a4a2b1f

    SHA1

    b39e93a0da5a827e9154142070e5eb93eb2a6314

    SHA256

    cb60eb5f68387d91f47eecbf64f465400f1d0dfd29dca34c2f7835a381f2c1ee

    SHA512

    646b099795a1e9232a3548f78cd3e0025695f2cfd002cb9eae73c0ce14c64dc253ad3ceb7dd53e6289b38b5f556ed511c103e99c197c0685f80361aa0d97c96e

  • /storage/emulated/0/Config/sys/apps/log/log-2023-07-31.txt

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e