fe3d38316dc38a4ec63eac80e34cb157c9d896460f9b7b3bfbd2cec4e2cb8cdc

Resubmissions

27/07/2026, 09:58

260727-lzlkdszdrb10

27/07/2026, 08:25

260727-kbgqvsbq4x10

29/08/2023, 13:59

230829-rap46sch298

02/11/2022, 04:23

221102-ezx5vshcd88

Analysis

max time kernel
1100630s
max time network
155s
platform
android_x64
resource
android-x64-20230824-en
resource tags

androidarch:x64arch:x86image:android-x64-20230824-enlocale:en-usos:android-10-x64system
submitted
29/08/2023, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fc56d0d18e90530c2416684852e6a552.apk
Size 3.3MB
Sample230829-rap46sch29
SHA256 fe3d38316dc38a4ec63eac80e34cb157c9d896460f9b7b3bfbd2cec4e2cb8cdc
MD5 fc56d0d18e90530c2416684852e6a552
SHA1 7a3b5ba56dfa7bc1f686fbf77c2d2423511dd565
SHA512 74ebab4b323bf637449180d2fd052ea3605795cdc41a037a314031396b87f799884b622f4f4e6f98d4731aaec311b6987b1630aaa35a1c3cde24252f70c8c374
SSDEEP 98304:xsUpVUoClDnZN/T5UP3wW+JF3Nn8BCKAQx9Xm948c1:etoWhUPz+PNuAQnmja
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.xwlbouply.dbhxzcsgw
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.xwlbouply.dbhxzcsgw
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.xwlbouply.dbhxzcsgw

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.xwlbouply.dbhxzcsgw

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.xwlbouply.dbhxzcsgw/yIjqkth7gt/gguUGyIgqgfIkyi/base.apk.IiIj98g1.6j6	5059	com.xwlbouply.dbhxzcsgw

com.xwlbouply.dbhxzcsgw
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
PID:5059

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

tmp-base.apk.IiIj98g699532871780211112.6j6

Path /data/data/com.xwlbouply.dbhxzcsgw/yIjqkth7gt/gguUGyIgqgfIkyi/tmp-base.apk.IiIj98g699532871780211112.6j6
Size 470KB
SHA256 ad8526c8a22e46abb9374ecc497e8ca649a3356b328e5dfd5d182e40320b8838
MD5 1e3b3a9874654814c26693a47efdf1da
SHA1 ee51fb007e5beefbffb1ce3059ff4af16dfe667f
SHA512 ca16b953ed53c97f176a7cf94b9bc0144562fc2cdc1f63afeac7dd390d5e3da2e9adaf496118d9d786256a2bcf6852ca94db60cde69e6529850a16ff0ac082e0
SSDEEP 12288:tieaW4tSAsvvhtTHgNU+G+PfmC2uKFZdyPETqYoZscEOz6Byz3:tltSCvht83G+Pf94CPETQsFE6Byr
MD5 SHA1 SHA512 SSDEEP

Submit Download

base.apk.IiIj98g1.6j6

Path /data/user/0/com.xwlbouply.dbhxzcsgw/yIjqkth7gt/gguUGyIgqgfIkyi/base.apk.IiIj98g1.6j6
Size 1.0MB
SHA256 47ed1a37d204d1dc98b409a5931737b80feabb2142afce83e2aaf0939be46087
MD5 2abbe97ce3b60ee481e5e5e57b2832f8
SHA1 0047c7a7d3dfdc3fdd3a2ec663e77b7011a07d63
SHA512 78c44bf90a94dbc017733b0391866c1083966195b95cbe514aea31ddf0ac0f6f72574a9b90aded184119b5bedf6440ecbe5073689b0e183f7c292d1c66e14924
SSDEEP 12288:pLJ5Meycjsx4JctLLUj8wnHK365UmYeUYfo1DL4XgYJsMS:fm3t4JUL4jlnMcMYfqDLCLJsD
MD5 SHA1 SHA512 SSDEEP

Download