5220902c3a0aa1f056ac2b13ef14e039ae89724718ec131ca703071b72179d03

Analysis

max time kernel
1887922s
max time network
165s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
07-09-2023 16:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GrabAndGov3.11_JC.apk
Size

10.9MB
MD5

b18d932d87c336c48714eb12ab75155b
SHA1

56acef9347dca50fe8d557385491b637954c42f7
SHA256

5220902c3a0aa1f056ac2b13ef14e039ae89724718ec131ca703071b72179d03
SHA512

96831b8e12fbd16314b20ab0c3fdbf2231b8e52e55a7b76d0b2a2558b3d0e6a953a0ce147e796717c10a2dff4f757e2bbaccaed1e304a011e363e0b538d41893
SSDEEP

12288:wcUZzZ/9zmgPIDIWWZaGHjUbDO7cImbwvfBvrqvvUCnsU1+BD8n5sR3ZrY1Q8MyU:sxZ/9zm9D277cIfBzevuU1+lz34cTT

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Makes use of the framework's Accessibility service. 2 IoCs

Processes:

mixer.czech.accidents

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	mixer.czech.accidents
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	mixer.czech.accidents

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

mixer.czech.accidents

pid process

5030 mixer.czech.accidents
Acquires the wake lock. 1 IoCs

Processes:

mixer.czech.accidents

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock mixer.czech.accidents
Removes a system notification. 1 IoCs
evasion

Processes:

mixer.czech.accidents

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag mixer.czech.accidents

pid	process
5030	mixer.czech.accidents

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	mixer.czech.accidents

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	mixer.czech.accidents

mixer.czech.accidents
1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Removes a system notification.
PID:5030

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-09-07.txt

Filesize
37B

MD5
7f827f22c0af26367c072c001acb9286

SHA1
446fffe06f777176f408ea833b536616b9d32a31

SHA256
6fba6c2a9d9c47bf054e62a18da3d808a9596680d7d35aae9f0cb4a135164e72

SHA512
da48432cd485c3620293367a85c8011634b8a44bfe6d69d2f3576f670d5d4a8a1a5a250dfadc8c7a3ab440db831e01b3270e3b6570e274789dd79f350ec9450b

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-07.txt

Filesize
37B

MD5
7f827f22c0af26367c072c001acb9286

SHA1
446fffe06f777176f408ea833b536616b9d32a31

SHA256
6fba6c2a9d9c47bf054e62a18da3d808a9596680d7d35aae9f0cb4a135164e72

SHA512
da48432cd485c3620293367a85c8011634b8a44bfe6d69d2f3576f670d5d4a8a1a5a250dfadc8c7a3ab440db831e01b3270e3b6570e274789dd79f350ec9450b

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-07.txt

Filesize
37B

MD5
7f827f22c0af26367c072c001acb9286

SHA1
446fffe06f777176f408ea833b536616b9d32a31

SHA256
6fba6c2a9d9c47bf054e62a18da3d808a9596680d7d35aae9f0cb4a135164e72

SHA512
da48432cd485c3620293367a85c8011634b8a44bfe6d69d2f3576f670d5d4a8a1a5a250dfadc8c7a3ab440db831e01b3270e3b6570e274789dd79f350ec9450b

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-07.txt

Filesize
25B

MD5
ba30336bf53d54ed3c0ea69dd545de8c

SHA1
ce99c6724c75b93b7448e2d9fac16ca702a5711f

SHA256
2d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af

SHA512
eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-07.txt

Filesize
288B

MD5
21bfba8d5132b7abfc9f326cc33c8a80

SHA1
01f7ce3dcefafcea3387af253945fcb08fa194cf

SHA256
014a5c2af45a3de9bfcd187a271c9beab4ffddc4344e708925ac389f0e6f9d27

SHA512
f2c72ba169297054e31b347aeaf57f71327074c78a8f20a1b077cd6e53b30354a8e42e40bcc08b33bf0dde9d77ad378068082c115e899b985e8270be9a064e9d

Download Submit