Analysis
-
max time kernel
4223364s -
max time network
1222s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system -
submitted
04-10-2023 17:27
Behavioral task
behavioral1
Sample
FAPlusv140_Jected.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral2
Sample
FAPlusv140_Jected.apk
Resource
android-x64-arm64-20230831-en
General
-
Target
FAPlusv140_Jected.apk
-
Size
6.8MB
-
MD5
232c85e36c33e449caa852ee2bf1e34e
-
SHA1
6adc756ffd886a8313758facd9755034e96789c5
-
SHA256
ac24b61e112fbe6a0d994f6078c378b01a56359814db828ad73353708825c491
-
SHA512
e26eb8f0ac9120110e64825c35ff6ae09997bf4156ca540a16793d69b65a262d07b9ad891e3e253144a1f9de06b74f19cbc8c4749c8e8b958d7544b6f4aee37c
-
SSDEEP
98304:Yaf0ZGU0C0e/iVoPw8rnSC1sWF/04GSwF3pnFtf8TczUq5UDRkBlTAgq6ijWJUUi:Jhfm/Qo4FwsYvG5pnFCTczH5ekwviJXg
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.filmlegacy.slupaf Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.filmlegacy.slupaf -
Acquires the wake lock. 1 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.filmlegacy.slupaf -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Removes a system notification. 1 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.filmlegacy.slupaf
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5dd8cdc33d1ee453cd226a94821da6212
SHA1e8ba6b6a3eb3b3d0ba6d0d65b026b99fc2304f9e
SHA2565f9e7b1d8a09064f9c6187df1e5e7e984020e564077e879ee94cee157f23641a
SHA512c39b8caabd74eb144ba1f83c2b477b9e6075a742b0921ca4846476c01ebfdaa9c10fb34b4186ea1b4c8162939f1c3eb23e64c79e4f3e8c035204c11cb58de92d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD55de773923623406a51ca35e09d4f59d7
SHA19acb39cd295d910359aaaa95ad1a334ba18f9ecc
SHA25672ad3b94a33a9362110492a965b3aa2056506ce68d7e8407d4a2f5309dca6b31
SHA512fbade55661d27590be4381e69a0f8728c208e86aa53f6a6110f91f7c8a834860f0886904485ddfcbc52223e0c5d697d796a0071c4b29527516b11926ead81c8a
-
Filesize
40KB
MD58858916724b3a05ead66ed1ac3e72ddb
SHA15fe28c37dd78c9f551729b026c084b61fabd2a3f
SHA25672d97ae4982aa48d7cb0bec7fa4eb913e4c607a942565866fdacc1b0b310e664
SHA51295a9918ea4a1b7f06a6c0a1d42612060bcf35ca1719708029d6280aa202b8be631a580eeb5a998ea051c26566a16cd96b391e8621e062b68eb1aba4611a38e73
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5aacd8a8a7940f25da2499f6c448eb4a6
SHA1b3c042d0c6933ebfd0e9458b53b223508a79e40d
SHA256ba0650b104de4d54f26b2677ba84f5dd25e139e03c8f3c9a7319832151528366
SHA512664163b3b7a0d8b93b51213858979c00f719c76f4a57d2687f7476abaaaf4509795640bf44a5def6d3e6e199e2f89c094a2038680fb6f26f449367c862b69afe
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD526b170932daad992a7548735cf701c4b
SHA1fe1adce6583e70cad075d5c3e4f509c5893931a8
SHA2562b884f2714da7cffff3fac781ca4a66a4c3a7105512bf8f348e55f343c1f1bb5
SHA51267e7715f48b4652ac59431c1094bfdcb5caa1bb645e9c7d2ac33b48d2e79bc1e08b7b350e9520af9d4999b5cd4616038cf11bca88dc809f0c0eb51fb83d71161
-
Filesize
16KB
MD52e564721b8c94dac052ae033f9e59c56
SHA16b7fe8dea4c67e8e89fb8b4c4a910ae23dda6b0b
SHA256f2b43b369e1a4a8de77fe3d9323f7300ca7b96843120ef0cb22b125dc59f5505
SHA51251bb25eec49e044543fae4ee6c05b4bec0d9bf6d7cb89677ca7f2213373ec973a29f133e421b316c8862093fb257ea1c0f8bfb9197e422077ef5478f4a0bb5e7
-
Filesize
32KB
MD5ad7bbdcce258ba21d0a07659a3849e3f
SHA1887e17f38cf736cc82125092f6cadd5753184286
SHA256a6417906596802ee2a80cd22ef848d832848a6f36f4e45d320e9b98633a5c456
SHA5124519d5aec86a163c9c2c97d1cf9862cc9b421749c0d78c0f4ceee31c9fe07ac557e736d5b3f72942e2d5d44b578fc8a6789f2e7a3ec98ec2199fdc50dd3ac45d
-
Filesize
512B
MD5e6d071dbb727b8efe9c59dc0b810a4ba
SHA1261bc6313f55d2f09a2a3c85c9386955ab6626b1
SHA256d85cf2d21f9c160eb2698574d09f7805bd829cb4bf40c629407bd1ba094f4b73
SHA512d9732375f007325565890f679986408eb9203d64c0b050e838c91a577e7c1d40edc8be9d5ba067b43a0d0ec626a5006af7701acfffa848e658bd90d18cd62e1b
-
Filesize
8KB
MD50e3390ed291f62ad16cb4a06d86ec19c
SHA15d5b321952ed78ce9997a2db9c4823660c163775
SHA256ca14f7400f779ee9c70632c55cf7991009940a1284b7a805576e46d303155a60
SHA5122ab79dacff0d44284a94284fa613ccd0ff725224a63953d81144a2d2e8744cf6ac375d7ee6cfa4c721ef4416f4b0c644414c1293ef946cd9cf7d2f49052478a1
-
Filesize
8KB
MD55fe549c0b2eea6c305cadaae276a4ba0
SHA1f1127364a41410901e9c08e443a00bf646165a99
SHA256d7f1d3ef8d1fc5eb46cc86adb361882aa35ebd5ac0f7b4e08e02dbd0bab5d942
SHA5128511e7c9816fe2fc60ce1f0f58160ca14930e637d5e00a3791d2098e9687d67b1fc7264e28d518b4f721ed5e2aeec58f35cb9fd939bdcc7e386edbee951311df
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD56b0c426bafd0666ab39d32a75a076afe
SHA1b8317312b081dc5773fd82b23c5fbc98c3d7fd73
SHA256bbd7ea8bd70ccf3ac4abaa1913193c62731746055afb53e3dff50495b670b619
SHA512a2c8537d2789660819e2ece42dbd433323dadfaaf91906a91c4ca4946af86fe8522fd3244e55ac89f3cd10744cc520ab6cfe34371080226ec1ae49bcd2dd67b0
-
Filesize
16KB
MD5179bff289022ee172d9e010d151debc5
SHA18b6e0583d53a8ff74794b82d7bf0817747e18d48
SHA256be399b0726e4d0ee0f773edaf0c52e09a817ef330d0749a8ee7484616ab9359c
SHA5121ac5160ff263d5395ef50ef7296e607f0cb5b04541ea08bf2287ef172547b814f735fbe9f84bd52a4a90b3fe15bbcab22a96a56c526791112fdcace6de1d088b
-
Filesize
16KB
MD56aa6583e80001fc5fc5b5db934ddd79a
SHA1db6c78536e0c989d30c9dd10c2ddc5bc975a260a
SHA2566935fc7e9d1b2099a3c4e1558c7ed016ce1810d3b2c3d9866f1cd51362e7e50a
SHA512664fa221b9275f42a90b35330a7d01e9de3825bead4b21c8572574f3dacbe6f03b04ad0bcf28176c3f67ffa2057bc434faa788065b799cdf984a05f92e338b8d
-
Filesize
16KB
MD5d7695f076a5b60f15e6761462e31efcf
SHA1c231de7900716283930fb2d669eec1120bcf83bd
SHA25635bba939dd1576d3bf95cf9dbbd34a24bef36dc03cfe9dfa8e529772a6807733
SHA51217ccc734d54909a111da99b2e9a2077bba1373075252ec5db3df5d9ee2f02a2e9c0baec343fa23d85686a13fd66618074365d53cc80760c94e1fee6bdd9f8918
-
Filesize
16KB
MD530ea75060742607bec2e8b40e4bcc33a
SHA16c7c59100d89d90ae28d0d8f4b2f9ebe0d462391
SHA2566948f6d1183a856263b858a356ddd4d2dd650d97ced9851551ba96724a3a93b7
SHA512489246fc7674106cf52b0e959066558d8bda76ab5ccc25cccb4423b60271c072584087a957e7c02e000deb53db984f52702415c3bf98729094ac3bb0bc3c8093
-
Filesize
512B
MD500320c1d4210c5f70114d5193f45488f
SHA1f23824ed24e8d4afd1a8fcbc373d3c2273b74076
SHA2565df0844bc0a083d3a51b8f7dc0ea34e1626267dde58ca7e8bc9a30d034dff2ad
SHA512713f9a9f788ff0b1dc7d3f2fef918cd705b05e51be4e80ed31422b5728bafe05c9713a0094bbaa66cdafdfcdf5f21843afaf6ec8141840a82f0a552820569ab4
-
Filesize
8KB
MD51976fa8c955cc471f2bcec3fa6e9523f
SHA153e2f92e9adfcdfc4daddde2bf3b6a0bc7682d99
SHA256269cd18316349a2eced0df6a29c2bf3bdfb71eae97bf52ca30e17157c2e642ba
SHA5129676f04ff227273c60f89890d6fd9e27bd41a7b2b909260ac87d3a1248ae30c08205d597968a93c59ac336c54787031fedf0a9ff39d155579220432d48691b60
-
Filesize
4KB
MD5992fec22b9b56efd8db0a83f086c889b
SHA1ad41e295e4f50e5e8d48e9b334082909582e18ed
SHA256baa4d5e2ed18af2fd23568fc6be2555b217f49035df4674682045043b17d83ac
SHA512db83cd8c85e9641ce61ae71b3af96799576438631bf79e8211e8c9209a0beb59bdd3625f0bddca9f7e9bf890824eb54fc4018aeff1a4faca0ff21a4c6670ffcc
-
Filesize
8KB
MD5f3c351cc9278f373d551b652e2880a6e
SHA1dba375b11de3f496e0b51e3423146c9b8d7a7a4c
SHA2565ba719a199efd3bc13352aeb5989de1319bde1c68623c7c50e8dceb2e437136d
SHA5120fe8817d7d1cc25b883d628c1f3d4c9ecc28ec54dff5164f428f84085d0ac88a0126ef4d84cd05831df84860d8d3f6c76fd6f2e171ccb9699af4a85c2234bb9a
-
Filesize
8KB
MD5248ce8b0a84ff737538430d291bc80f2
SHA1d5b807efbeb899197b4ca7ef22bfb1717f331e61
SHA256f88e7ff97f0be3425e2ecfb9773d0b4a4e6438a4ac3eea32d477a6f350cf596f
SHA51237c335a8e7ac14f950d563eaac0ba5a82e4b7c898d001a69579a7f841817408ddfaa5656b1e49ddcb9b68915d6db56e3a8704edf9f90a979152b2c567d40c774
-
Filesize
8KB
MD580ce310f46ce555b369e4becdd84e703
SHA1dd0425a777ca8567704a92468abed47894888878
SHA256b4af4bd39182e4d522f877d5181622921913f73adba4fae6b57b09a2d3607cbf
SHA5125f4247936d8787a663f64eab117cd246184051f577cbd6d8ee416595347378b0a2a7685875c20264e8b8c31159cca81f20322c9151949042ba4475c76c0b1603
-
Filesize
90B
MD556303e5bffc9d65fc65ad72f24ab5b89
SHA1ce44875c0213b06888d56866e269d1117a62f3cc
SHA25676294819e3808f0f28938f0bbd35612c646888c714bf537f32e6fe42367976e2
SHA512aec222b5eb97df8d6d91cde75513712a589a01ab7f02e8e4f6a723df80162a8087e1f8fb2dd3f76ff49490aa2ab06828ecdcf7a8a0d6cdcc8ab7f68707e915da
-
Filesize
572B
MD5e6e73e2f3707e723ccc3650ef829e6f8
SHA1f652f623bdb393a0c95f729591ef6dd320f1bf12
SHA2562c446dc3d28f31b029ee88d683630a8973eb52fe5e111655e5eb52127a1b5e83
SHA51272f471529022db0e5a8f2fbc47e3e590d7581d0fa169bb2ae2d5f454d21ab5891a9976bf44104eb25c0225c0892fcbc6c96f3b5c572b28a4ab36f8bbcd32c7ed
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/data/com.filmlegacy.slupaf/files/frc_1:1091211014402:android:c0f9c9284619517870521b_firebase_activate.json
Filesize788B
MD50161b3adb7f72c96479ece0f6e361a94
SHA12f8f28c80600f25fb9ed6316d7d8f45ac1b06dee
SHA256f97683a7238c3241fc91e15788397da10650ce99583c2cd371a01c8d2897c80d
SHA512e0dec7808163de4bb716b53c6cf64881c861626df8ce17b1d0048fa7544364aecd6590d03a3f01b96730e5b80664184fbd20f88cf8ac131fc2a7393e1d5539bb
-
/data/data/com.filmlegacy.slupaf/files/frc_1:1091211014402:android:c0f9c9284619517870521b_firebase_fetch.json
Filesize788B
MD50161b3adb7f72c96479ece0f6e361a94
SHA12f8f28c80600f25fb9ed6316d7d8f45ac1b06dee
SHA256f97683a7238c3241fc91e15788397da10650ce99583c2cd371a01c8d2897c80d
SHA512e0dec7808163de4bb716b53c6cf64881c861626df8ce17b1d0048fa7544364aecd6590d03a3f01b96730e5b80664184fbd20f88cf8ac131fc2a7393e1d5539bb
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
1.7MB
MD512d141623743275175c2c940019f2898
SHA1e3902016674230302a9272222e85c11999b34045
SHA2566ed5b8d3d848d73a1c2193e73d88e79ea0a1e490c5a838773ec1f5867c628616
SHA512bb64b26a812a8ee3f9c643ea64dec761f5ca2f997fa461f78f99d950df78f6e881396502f229006ae2c01bd53d2b121a2f2d2e9f1134535c242a1666f7e5d5ad
-
Filesize
40B
MD5848fde1778c168b4d125fd2b38ad0156
SHA19970b54af93b906b209b641c68578ef660a97284
SHA2567c6a730e950d3fe547458004e66e3531c06f0727bc186819abef72195e72241f
SHA512596660ae4cfd435e09b17f26d92ca55e184b5002bbca688320e94c2dc75493c86baaea48af8fe739ee447b2947a5c3fc50446a18294e13b019d6c7374378e951
-
Filesize
28B
MD536a3a93499b643972cada51cab088795
SHA1bfcbcdff770e9c28afe3cadc1b0bc27732d7da39
SHA256659b339cc4b282f8c464332dd2851132f3a1139ebcdc36cef990e20e784bc943
SHA5127149eb7091d7fe1a0772231d2ab1e17f7d233f950a56f77d7c66a60454de991d29cf9af7ddfe02212a56122fec01686b14bc5de5a47b9dc59da4327d7dfcb3bc
-
Filesize
28B
MD525236b43de0ecc56ce2743ec5b15f0e1
SHA130d7fa3631c9000ac193bdd8d687ff443b204132
SHA256f8ce3d28430c3b324e572a784ccb55ebe4cedf9b120a9b852ffdf4ea50d4a01f
SHA512e3e2deadccdd6b5f69e8f2e91b5d6bb8600e85166a902b9033bb8ec52654f230773019e99933825c58f4b88967e8c14b583a5e245f16e335a497d36a5028a9a7
-
Filesize
28B
MD525236b43de0ecc56ce2743ec5b15f0e1
SHA130d7fa3631c9000ac193bdd8d687ff443b204132
SHA256f8ce3d28430c3b324e572a784ccb55ebe4cedf9b120a9b852ffdf4ea50d4a01f
SHA512e3e2deadccdd6b5f69e8f2e91b5d6bb8600e85166a902b9033bb8ec52654f230773019e99933825c58f4b88967e8c14b583a5e245f16e335a497d36a5028a9a7
-
Filesize
279B
MD57b00e300ad1cf52d8c272f5b58c471a0
SHA1e087242d7a542a2052466d929a4c1839f3d350e6
SHA256f47a33f12e5df9d8fda0c14b344d3e353ece0205e865f2a9cf01bbb1bfe2d1ed
SHA51255d3d7f56df365ceaa7f24b052ec5ed9bcefa2da30f0efbf8b4e11436304a9018e5e0aa260dd60a9969c88a23ee6044975d23180914eb568e9d459b106dddaf9