Resubmissions

19-09-2023 07:31

230919-jcj2yafe6s 8

18-08-2021 19:58

210818-z35tvsqbs2 8

Analysis

  • max time kernel
    2891725s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    19-09-2023 07:31

General

  • Target

    4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1.apk

  • Size

    3.7MB

  • MD5

    de51b859f41b6a9138285cf26a1fad84

  • SHA1

    a2189ca8db0f01435282fac0f5a44005751604bb

  • SHA256

    4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1

  • SHA512

    8f96cc28a01a36f37bbfb7863560a55115ad73ba97daf57ff515816838dd5b30d95c3422fc72f880492116620209da5faccf0fb723fe935a1c1df45664d4d98f

  • SSDEEP

    98304:4fYw/F/AWO7+d00Vs18LnORE/TRZWT1wS/jl1v:4f3Ow00ayTPLTWT9B

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Removes its main activity from the application launcher 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • ycpgmsxy.rqhfesas
    1⤵
    • Makes use of the framework's Accessibility service.
    • Removes its main activity from the application launcher
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4147
  • .Geny22
    1⤵
      PID:4177

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads