1f55a377505218cabb42dbefc07e6133a248fa9e8dc4a852ebe9927804b2826c

Analysis

max time kernel
2245445s
max time network
164s
platform
android_x64
resource
android-x64-arm64-20230831-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
submitted
11-09-2023 19:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ready.apk
Size

10.7MB
MD5

9f075ea6c3113a5c77e2ee61b4f5ace6
SHA1

a71ec061fd2b13551e25ee07e7f7e40e3046fff4
SHA256

1f55a377505218cabb42dbefc07e6133a248fa9e8dc4a852ebe9927804b2826c
SHA512

d68230a88da2c2348088687d86c70690f0fb8c56a53239cf096e322acd1d5ab8b548e1181c3bffa69e9f16ae4e1b3cb51021c636770d8078c69b2a15cb61bd1f
SSDEEP

12288:8t9e1bmlT5mMfqqDbw7LMyFJ5FS0NEFj1VLnNC:C4mSIJkLJFJ5nEFjNC

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Makes use of the framework's Accessibility service. 1 IoCs

Processes:

ob.complement.podcast

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	ob.complement.podcast

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

ob.complement.podcast

pid process

4392 ob.complement.podcast
Acquires the wake lock. 1 IoCs

Processes:

ob.complement.podcast

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock ob.complement.podcast
Removes a system notification. 1 IoCs
evasion

Processes:

ob.complement.podcast

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag ob.complement.podcast

pid	process
4392	ob.complement.podcast

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	ob.complement.podcast

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	ob.complement.podcast

ob.complement.podcast
1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Removes a system notification.
PID:4392

ob.complement.podcast:remote
1⤵
PID:5000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-09-11.txt

Filesize
25B

MD5
a9148d406d2aa27774f728eac988cdd3

SHA1
68c1e93debcda4b97e06720a3b93a434e0f0c4e5

SHA256
bd8740f21d0f44f343afebfd133a234fa5210d5f4f79f2d826980a4a1bf07a38

SHA512
f6f089bbf90a16061e1af9dc677451ce729fcc908218f60977862beb3f370ff69948eace2a4c995a0d65a96efc5263da307d77f514ec3a16f02133d7d9cc2215

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-11.txt

Filesize
37B

MD5
8ff31bd87f525742d1693a62d99dd4d6

SHA1
41eb9344509dc310898211a6ca6a2d32ce42923e

SHA256
4083c1d7859c738c9ac2d623a97f3a5abee21df619cdd78da2690793b60bedca

SHA512
2978ac96f893e3a465406e22a2f6ca89c78ca212f691f868f751c3ce5d2bcc3b975f28dadeb86bf2bf9e8c7332c7481a9734e6a9bdd36d474250313ee7fc90e7

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-11.txt

Filesize
25B

MD5
a9148d406d2aa27774f728eac988cdd3

SHA1
68c1e93debcda4b97e06720a3b93a434e0f0c4e5

SHA256
bd8740f21d0f44f343afebfd133a234fa5210d5f4f79f2d826980a4a1bf07a38

SHA512
f6f089bbf90a16061e1af9dc677451ce729fcc908218f60977862beb3f370ff69948eace2a4c995a0d65a96efc5263da307d77f514ec3a16f02133d7d9cc2215

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-11.txt

Filesize
37B

MD5
8ff31bd87f525742d1693a62d99dd4d6

SHA1
41eb9344509dc310898211a6ca6a2d32ce42923e

SHA256
4083c1d7859c738c9ac2d623a97f3a5abee21df619cdd78da2690793b60bedca

SHA512
2978ac96f893e3a465406e22a2f6ca89c78ca212f691f868f751c3ce5d2bcc3b975f28dadeb86bf2bf9e8c7332c7481a9734e6a9bdd36d474250313ee7fc90e7

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-11.txt

Filesize
394B

MD5
883f77ed9b9aa4925c4be7f2b9ba76e2

SHA1
5afbe4639b65eab600d47221fcef2f1ebbbf679b

SHA256
fe6503d2eb87bbc7039d089cd45b982d21c5e20778f23f6b2ce7e25d066e38e1

SHA512
9364b1bc019532cfd7fa09f42067ba65695de656bd8fd454443f777306b7a412ccad14eaab1bd9fc6954cd4ccfb5d63cc83b9c198c70e3b98617f46ba4d5642a

Download Submit