98440746eb599a4cad862ded3089b9f830117e2b7ba4deaf1b521f7ed8e6c5eb

Analysis

max time kernel
2165877s
max time network
158s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
10-09-2023 21:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

prueba sumativa.apk
Size

11.1MB
MD5

5cc2e191eabc04b6c1d4e3f277b9d052
SHA1

91855aa2aacb651c7b7d8adb73d7bb4366e10c67
SHA256

98440746eb599a4cad862ded3089b9f830117e2b7ba4deaf1b521f7ed8e6c5eb
SHA512

8b7e63c0015d7f6a8bc2b9d0e928f065b2586e6a08c3de067e5151bfd6b5d4692f2b0323056f4cd18ecd829a370b3e28c0c16df1fe4a362324933010d46eceeb
SSDEEP

24576:zB+zHyFbeWD1i4lC7Qy6U5XA1n9KGY+XWL9Nbd:qHyJeI1BSQylXAmpp

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

Processes:

satisfied.lightning.complex

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	satisfied.lightning.complex
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	satisfied.lightning.complex
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	satisfied.lightning.complex

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

satisfied.lightning.complex

pid process

4949 satisfied.lightning.complex
Acquires the wake lock. 1 IoCs

Processes:

satisfied.lightning.complex

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock satisfied.lightning.complex
Removes a system notification. 1 IoCs
evasion

Processes:

satisfied.lightning.complex

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag satisfied.lightning.complex

pid	process
4949	satisfied.lightning.complex

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	satisfied.lightning.complex

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	satisfied.lightning.complex

satisfied.lightning.complex
1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Removes a system notification.
PID:4949

getprop ro.miui.ui.version.name
2⤵
PID:5002

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-09-10.txt

Filesize
21B

MD5
7d387073b297d63997ab2390e9dabd36

SHA1
e7075ec4bf25d31e33510a9b1aad963c9e292d44

SHA256
69315b352d0cb43451ffc6956cc7f3b4065a783dc85b8edeb4d0c0549bdf0eda

SHA512
87789a6ea23b37766bf37059ce3a4f83bd05d184d226119e5c363b1bc14c2d6ec8d9e919ea2c7d85ffbd5f0bf834ba697853a9171a9b54d37f5b1b8e58d25949

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-10.txt

Filesize
25B

MD5
ba30336bf53d54ed3c0ea69dd545de8c

SHA1
ce99c6724c75b93b7448e2d9fac16ca702a5711f

SHA256
2d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af

SHA512
eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-10.txt

Filesize
25B

MD5
ba30336bf53d54ed3c0ea69dd545de8c

SHA1
ce99c6724c75b93b7448e2d9fac16ca702a5711f

SHA256
2d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af

SHA512
eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-10.txt

Filesize
276B

MD5
093b5812033b49b68dea3a4c25086a41

SHA1
bf102b41d34f9bfdba4523926752f1bd04e338e8

SHA256
1af157d00a5598f2d17253ff3f58234a0bf358222d2444993b798b1b22989885

SHA512
1c4abb12ccdfd39d20a2824af870ae0d0752db2ab845635fc1fbd26c6233253df0176aa4af6dab4feb564dfea6e2a753e6496bb526eae59fd02db86527efca3c

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-10.txt

Filesize
175B

MD5
6a58a223b7725d8cffbfc0a212827883

SHA1
9402870d9de2fcb20a8af858019e792b7e4b72b9

SHA256
7525da6836cfac000308b0e23cd6ac13b576734ef0614831a740ddbe7262c3e2

SHA512
ca3a7d4a8177bd56583a3efa5b4b454ffea2cc26207112af6005ad6875913c6fc9e5b48206309c912315c99a5771a64a880b1e8bdd256006ee94491bd4b9446b

Download Submit