215f873b3e5ac1ccb7db510baf0cbd50c1ed7aad8f0d375e853b861b19b2ad92

Analysis

max time kernel
2318332s
max time network
155s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
12-09-2023 16:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ready.apk
Size

6.2MB
MD5

07d24c6c7f241123a199db72e9b8c61a
SHA1

87a0ed3c65799404926a809b5ad8c097c6b9789b
SHA256

215f873b3e5ac1ccb7db510baf0cbd50c1ed7aad8f0d375e853b861b19b2ad92
SHA512

91ebec9fedb2782c3ff3247c1e0e5c141bb94296f4973e46a3e6538386f98b67c7e2e03bdba5da4ac668f94b1332ed6eacf13122b9b54d56998b419319503358
SSDEEP

24576:gLDVAZ03gh4wvb6f5bzvxcw93oH1oRzrSQvJkXm1mHs6:5UgOwDM5Hyw921+zrSQ3125

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

Processes:

mark.automatically.days

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	mark.automatically.days
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	mark.automatically.days
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	mark.automatically.days

Acquires the wake lock. 1 IoCs

Processes:

mark.automatically.days

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock mark.automatically.days
Removes a system notification. 1 IoCs
evasion

Processes:

mark.automatically.days

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag mark.automatically.days

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	mark.automatically.days

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	mark.automatically.days

mark.automatically.days
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Removes a system notification.
PID:4998

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-09-12.txt

Filesize
17B

MD5
e9741c8b822d66f3190e379511b05305

SHA1
5a534d9a8acf1d681cc5fcc3fe872eff02abaec2

SHA256
5cbdeb6552a33c4de8ade686f135d01418fe09d82e9cb3a7219be145c80bd152

SHA512
44db01c4a90608d23be9825e7ce24d240e1ee211e576b7b67b564b67f7737d9fcd28ed5338196bc5541592ad0284aeda4a9f4df0302f462147b127f3a1db1fc9

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-12.txt

Filesize
29B

MD5
b9b530e2448252311640bbecb69b796a

SHA1
215ede46fb42a68a7ae84c3019acb3019668a46c

SHA256
5a290151305de1ec4f790cd8ada8bd68c076a2c4ed497c40a519509659b65150

SHA512
5834499307946d130887067b2f837ddfef7fdfe3a7e5ed8977eb14c2dc1ab328334da35ed4c978e20b3e6b28ff30dbd12f0430f4b7c831481f339d360c260919

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-12.txt

Filesize
45B

MD5
11e464064dcae11be7956bbd5e854dc1

SHA1
33f37d3846cab06a54e791fbd683e5c6359add58

SHA256
c47b1353029508b39f7b6c7660a73a6434fc47c67acbcc5fc0a4d536484594d5

SHA512
02bc0a1469cd93bb63027291c7e9ccf21a0cdebff5a56996b7e03f92020b40dbada10bcd09ab41e29415bda65d9cafe948415a9542af897fd9561560adfb3ba4

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-12.txt

Filesize
33B

MD5
365f074d64faad2f0f0c7784608e5b57

SHA1
2105b80d01621cbd370bec93f73709a7b67d565b

SHA256
0c4662ed55fc03738e7903864ed0249c921b8f2d858531577eebd53501237cc4

SHA512
d29b5c16d10a78b386ba1f4882f7e80bc6d41887671abe6a36c746b015ea280d4a26f3d2af323b4ad755c256e5851a5b95d0bda8882c6c0a2c125bc748fab47a

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-09-12.txt

Filesize
57B

MD5
a9ec0c42a43c72d73c499e5c17ccbb8b

SHA1
731652fbfe61eac3fdb4b9d3e2eaa010848a0906

SHA256
6c5309ce3f31c9af3288b0de3305b7f5ddee97be60ca4ac1184f3c334480c05b

SHA512
5f8ed24a51f68cfa0627aceb9190d3a7febaee61bd5a89898ab113ddaa7ce2a41f129a28c4e200d5e5e4ddff7a483abc0393dc38e870782caf1c46d2ec0df2e3

Download Submit