Analysis
-
max time kernel
4224143s -
max time network
607s -
platform
android_x64 -
resource
android-x64-arm64-20230831-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system -
submitted
04-10-2023 17:30
Behavioral task
behavioral1
Sample
FAPlusv140_Jected.apk
Resource
android-x64-arm64-20230831-en
General
-
Target
FAPlusv140_Jected.apk
-
Size
6.8MB
-
MD5
232c85e36c33e449caa852ee2bf1e34e
-
SHA1
6adc756ffd886a8313758facd9755034e96789c5
-
SHA256
ac24b61e112fbe6a0d994f6078c378b01a56359814db828ad73353708825c491
-
SHA512
e26eb8f0ac9120110e64825c35ff6ae09997bf4156ca540a16793d69b65a262d07b9ad891e3e253144a1f9de06b74f19cbc8c4749c8e8b958d7544b6f4aee37c
-
SSDEEP
98304:Yaf0ZGU0C0e/iVoPw8rnSC1sWF/04GSwF3pnFtf8TczUq5UDRkBlTAgq6ijWJUUi:Jhfm/Qo4FwsYvG5pnFCTczH5ekwviJXg
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.filmlegacy.slupaf Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.filmlegacy.slupaf -
Acquires the wake lock. 1 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.filmlegacy.slupaf -
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
com.filmlegacy.slupafdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.filmlegacy.slupaf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5286fdaf25fcdc6da386b212eac9e2638
SHA17b02326fdffc2b2cbf0bae9dbf6a968e667157f3
SHA256d6349b6dbbadc3e1b3e4d4bc15ed753409a3d1c1eafdb0fd8ab5ac297a7ff787
SHA5120667ca2a0e578b62db7831122dabd892cd91c89110ca4c9832131055694f5b78fbde7b780a0397975c5dc1ac5f6e3dc35d3bae6ac9a57e45c3041fc352abaced
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD50cb80f74fc654f5370cd0adc44458037
SHA1f1497a4a72e5cd25c61d0736765fb300e4790c70
SHA256794d11cfa74ace4fd5abf0ab230f70ba333c777e1e808bbffbf0eb056567fe45
SHA512c0a51c24e0765f9d4bba4fd95b0b39520fd4f9c1f227161130a96a863ae72cf5aa270ba2a33afabf62ec169bf40c42f4e472b6386b38d59b8fcf84885e9956fc
-
Filesize
40KB
MD5d04c862c063afee0f61c49e58cf4e0b8
SHA14bfdc0db2aa9f7eb773ba606e895a4f538293160
SHA256de84d7032ad44f36e1af899414c03ccf1fdc564310bc2b2a1410acfc1f7ee7ae
SHA512ab7156da6ad136c1e7ca6f908e8fce2cadbee3953aca568027f79cc8de72369eaa84e41d8822e521b10d94f15d22140a4b092acd5f9bbac45e6c5137056e53e5
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5d9be2e88df77727d4120407400d6ffc9
SHA1785374132b86d0c1bccce193054720ea0f04f76c
SHA2561964425c38e14b7a8b0ebbf392ea5b58aac1216ef97dba28bdf34ed72b5f02cf
SHA51259092bbf01193179b087a69a532d650a98a62e255f59d964b9a8a38d596290ae0cbded2b37dbb95dbb2c22bd7d3faae4dc5702125b9716f42ec7101d4e246c80
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD522567c18c7d023e64b3b22781d794a9b
SHA14d2282a53cd2002453fcf0fa5297c89f42ce9a13
SHA256828f1255e9f4acfe907eae11483e367461a48b083b6dc3415c8f4ccac1dda729
SHA512780c5664c49d57ec9919b5b7c401d326f3023c99f7ae905c24328f3cfc49693dec12d3620b2889243ddee3dbaee487aac240ca8835221857371ab80d8e5ec5cd
-
Filesize
88KB
MD562da1c26ef1a6307e85304ac3288f129
SHA18be2e069707ee238cfef177db03224e85150fe42
SHA25604bfa1f2f18b32a72a3d127d1daeb9872d6319ae4ec96e1d770e82e335f08f6a
SHA512b9643dafb72e3025fc9ce4c637975581b656738c304ae6934cb4f26cd339137ec6bea5bff5588da8770358fb9e9637011d44c71d5efa0639e8c133f09ab22e67
-
Filesize
32KB
MD57daa8bf70cba1177c0aaa35143f5ff54
SHA14ddb8e3e373296808fd5a3832a454ea9c0c60b0a
SHA256f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
SHA5127178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f
-
Filesize
512B
MD56be8fc779687571c2f5135521ce99432
SHA10d5c3ce4839853cd3c33b71caeefbb02f57cedbd
SHA2569b0bede53a5a320868f98fe5ef9f9856e51d151d0b5f8351519fd26cab6c04cc
SHA512db3931afde905290f423b21efd0ae0d4243f0483b7f457b2f76cd96e5a00695b19ed4fac2c51e9e14438af9daf672c856207c4ce50a12c0350b5b39b63742bf7
-
Filesize
8KB
MD5bfbab2ddc6c06a1c1bba3bcfcb1006a9
SHA132586a552bc088aa2a467d1894983ea31ad94eee
SHA25610206953870853b9db56cba761a432da5bc9decca52ee96e031cf31d7213001e
SHA5122e5f1cfbeadda14a2e872af0e6a6026e2ad95e8735dcd4c3234f64b2426ea94584e0c10296d33332347171d2f94873a3433643829e2d1f782eb219394091518b
-
Filesize
8KB
MD572822ebc0c1313e437c04c4c4414bfc5
SHA184a62495a6cd42b9a9c1d3da6bb07838048f5196
SHA25680d33281cc2925eff61e4760cc5725ecc01a9773b730af0247e816138da10bee
SHA5126f32755eb6c6a8d327b212929856531dc3909331b77cb855bfad4d663cc1e50bc4739235eec449158a7e4a9735401754f794530d55f8a7f0d721627868f5b290
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD52b71995994832022de9f33368811377e
SHA14717c94bdfd87da7b6df2d4a662d1f240429ae4b
SHA256518074f0f12a496795cc43226b8580c6bd53e2c2546812f1c82e65c58ed510fb
SHA512b3db7216b6108401a2e7cd816abd76e50657f98c3e2b6fab085634fe27b186d3bdf456f32ababa067e67286bd60f9c322d4a42f1825f11fc588e00e75714e548
-
Filesize
16KB
MD519c54982b7b8e7591f027a5da4111627
SHA1c647c1ab313bc194b4283ffea29a457e339ee0f8
SHA256c59917d41c63ffb9eb69e49ed241586f4a97010c2a4a881de1cf975222120c9e
SHA512d4a203f58831e0db2c30d53ab3b83a538bd63fdc1482d7426d84c5d34ac9332144c11ba1ee86a39ac9cc1fd1e88d190a1c100af13ed28db2d18515cc18b520ff
-
Filesize
16KB
MD53c881d42c67a8e18143f51608053ee3a
SHA107573dfe9ada3fa32bc88638e7706048d393a1cf
SHA256d645e32f74d3a9e960dbff7d079c2a2308accf9b9fb8c72e5e68552ec5975d28
SHA5126716441c6da38ba2e3ab5d4fa463976eca32a9f2fa07eefd26a867536a9be90febd99787242cda17ff30a7006fc03c1bb872d49cb062943eab7e5fa7b7e3839a
-
Filesize
16KB
MD5749b4784c404e17cc3322e4aa61158a8
SHA11265bc54b6a44ae78d9f2e00e8a4a97f8f9ed0a2
SHA256cef486571b6915a93748bdbd383b6990ebf45e1f5582655af8f86269b714fa6c
SHA5120bc360d4408feba9db3231c4638fd0b1768d3b596997da76789baa929f727ef5335e1e6828bcff7b68bc630fb10ca4c04b9cb2bc52b0c9cf0b48b022c1dbe5d4
-
Filesize
16KB
MD5d5d787c5aafab25ce53cd54a00f2b1bb
SHA1584986a77929b56215567e642234a3b0ff87a2b8
SHA256488b220d34e9324f93456761151ac01ab90c6dd86612d231f5fd6927972539d5
SHA512cea6e6bf2b0f1fa37b3fbf79dcc7a07696cb214f88336ba5348bc8c83378ccb72bdcb6e2b4375a3d594d08fee8591f6bd90610d745dcd4d2add50b3b5ffea79b
-
Filesize
512B
MD57fc0f609d011aa687f09aa333937197a
SHA165e67fa742e8d2a913674c934f86c8160d06dac1
SHA256728325faea7b14bb1c0715940e86d9649a6bd0057f36a5b51a471ec3d99abd1f
SHA51234c1a320c6771a10f19e8be8bd08290ae4241b7c6b4c041640beda2913bf856cded8b27355b75590ce6811a0dc69d22d371a08de6030730592e5263e2b086275
-
Filesize
8KB
MD5c05b218183ef72fb0cdd8c372b71716e
SHA17a9a66f4170b0d27367d3bc98a1480d9d71a68e7
SHA256ffada6b6dc9f19c0955f3a6d9ea3a92cb3cf644ea99c909fd121ef3a6d92f3e7
SHA512344fbf15ea4aba299433496e77fd7846592c175bef2691acde513586af7b19696b39b72fc7bc2fbb642348758874c4db057a981f649b1f0a37fe95ef33e1326d
-
Filesize
4KB
MD55a5f44fbbba11526ccdfe0cced0f668b
SHA14ba4cab575dc65f7e5e2883e57fc0576dfb32e0c
SHA256b1de91890a7c233415053d2f51d7abf2232f24bd93d3fc13c44d2434265c387c
SHA51207536c2e23e687152fc1607965d849a8e2a00e6630522d4a4270cbe8f388f1dead1819bdec9f48cefd23a47b07523bfec195a7ae88ca8fbad5da808c5932630d
-
Filesize
8KB
MD5a22daec033c40a579bff80d967f07d55
SHA1b54f23d7006684a3a03b8fc735b8ba989ecd52bc
SHA2562c3d9b10f8cddd4b588a2af8e8e8453bceb61e347bb82cf3ddc01d5039d57aa4
SHA512395ec95880273b8c60ab28aa78edb945a1d75777382b4c983a12995f0822a356b9d9c6fb30564bf5d0dfb097136524ea22d8591a27d83cfda35a468ac1a912db
-
Filesize
8KB
MD587b56de9344b6b41b70509f23612b585
SHA1641a2265b3de18a984be7529fa3b19d242f3b489
SHA256486cc1562e9325e7673826cbdb28bd5c6d92ade812fd11b5ebabf1e540797136
SHA512a4f594e58e31ad145c51238c9de35f8359d769c38224246c1e8bd4dac1987b3ab1b86e266771a8b06f4260b64967fdfd1aa6aab6037ebac6ab9e256d7d690192
-
Filesize
8KB
MD5dc38c35007be40b2eb6ab7dd83b7e2b6
SHA19fe2ed6b0e563e8ea10027ae6a6fe1d2ee5fed59
SHA25665ddda6583c5a2ab96d3502fd582960fc5792514bb9c47a5c2b1be58afc845d7
SHA5123edc235b78475ce01a4ee3735a3eedffb206d9a00155972452c65b649c6249323e036166b107c9d2c00cb7af95d74b805e76b4fc5a1c983a7006c9fcc5037c88
-
Filesize
90B
MD5805bf3cc6ce95a8ae04d33acb91f52d1
SHA18d6605b90192e81707e630be8cb308527a53b04e
SHA256c770820acb8baa35e7aa254c0c348ae6ffa7343f8491170582dfca25a0d007f1
SHA5121501438e8c39ce592fab665adeced4e183be28ccf29a3dc7fefaeb54a19e3aa728d1aa1d3b360559d4ba4ef1da508904fdc798848cbcf85207043fa408e2830e
-
Filesize
572B
MD5c87b251aa4fddeb0f52b9781eb52d6ef
SHA1122ee5e33f3bcde7b23eb9e433c06cb585cfa48b
SHA2567ca8aec7953fc180924134164bc951f85b06a5b9d4ad4dcf95984abd15170dd9
SHA512e801db7ef38c3f7b3b27741f5f9a04e83d7e4fca981e2bfadc1f915d551172fb2eed7cd9460addde65c274b3666cc642eae6383db870fd5f371ac7692e270714
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
41B
MD516d3e6eac0e79222a9b368edac765b34
SHA148d5e621fcdd84108f5750d6905180b622715b11
SHA2563a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7
SHA512d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/data/user/0/com.filmlegacy.slupaf/files/frc_1:1091211014402:android:c0f9c9284619517870521b_firebase_activate.json
Filesize788B
MD56936a8a829c21ebaa14c9dc425da6eb3
SHA119fa52c478b9dc1ff9edd2f581586bfa164b0038
SHA2566f0c35de68758766f5431543cd84d136404d502f58868702e63421234b90c1e2
SHA512169638a7b4cc75c3d553ebdfca56c860fdeba29e564db2dc47ba06688e77696873586b3a8c8dc23dcf3c2df92580ef1ae6977d7b9613dc66581f6601b3efb5c2
-
/data/user/0/com.filmlegacy.slupaf/files/frc_1:1091211014402:android:c0f9c9284619517870521b_firebase_fetch.json
Filesize788B
MD56936a8a829c21ebaa14c9dc425da6eb3
SHA119fa52c478b9dc1ff9edd2f581586bfa164b0038
SHA2566f0c35de68758766f5431543cd84d136404d502f58868702e63421234b90c1e2
SHA512169638a7b4cc75c3d553ebdfca56c860fdeba29e564db2dc47ba06688e77696873586b3a8c8dc23dcf3c2df92580ef1ae6977d7b9613dc66581f6601b3efb5c2
-
/storage/emulated/0/Android/data/com.filmlegacy.slupaf/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.filmlegacy.slupaf/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.filmlegacy.slupaf/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
Filesize1.7MB
MD512d141623743275175c2c940019f2898
SHA1e3902016674230302a9272222e85c11999b34045
SHA2566ed5b8d3d848d73a1c2193e73d88e79ea0a1e490c5a838773ec1f5867c628616
SHA512bb64b26a812a8ee3f9c643ea64dec761f5ca2f997fa461f78f99d950df78f6e881396502f229006ae2c01bd53d2b121a2f2d2e9f1134535c242a1666f7e5d5ad
-
Filesize
28B
MD536a3a93499b643972cada51cab088795
SHA1bfcbcdff770e9c28afe3cadc1b0bc27732d7da39
SHA256659b339cc4b282f8c464332dd2851132f3a1139ebcdc36cef990e20e784bc943
SHA5127149eb7091d7fe1a0772231d2ab1e17f7d233f950a56f77d7c66a60454de991d29cf9af7ddfe02212a56122fec01686b14bc5de5a47b9dc59da4327d7dfcb3bc
-
Filesize
44B
MD5c46ec6c9b7e9003981bb9a0ac5d04c90
SHA1f5a56254eec9ed1e29931c8e8837d122bfd4791f
SHA2562155672ad73de428be4d7187c7ec86271b68f8634524a1dca265598a2cdf1282
SHA512a14485d56df05f050c2c410769a42de058480d999fd3d70280717aa956cb9d4e4f7aed54094be9086b00e01e29f07b04775a5b2e01ec6f4a18a762c475617d8d
-
Filesize
44B
MD5c46ec6c9b7e9003981bb9a0ac5d04c90
SHA1f5a56254eec9ed1e29931c8e8837d122bfd4791f
SHA2562155672ad73de428be4d7187c7ec86271b68f8634524a1dca265598a2cdf1282
SHA512a14485d56df05f050c2c410769a42de058480d999fd3d70280717aa956cb9d4e4f7aed54094be9086b00e01e29f07b04775a5b2e01ec6f4a18a762c475617d8d
-
Filesize
44B
MD5c46ec6c9b7e9003981bb9a0ac5d04c90
SHA1f5a56254eec9ed1e29931c8e8837d122bfd4791f
SHA2562155672ad73de428be4d7187c7ec86271b68f8634524a1dca265598a2cdf1282
SHA512a14485d56df05f050c2c410769a42de058480d999fd3d70280717aa956cb9d4e4f7aed54094be9086b00e01e29f07b04775a5b2e01ec6f4a18a762c475617d8d
-
Filesize
328B
MD559d9bfcc7d87153806a18b5f484e2216
SHA104fdc602ddd524c6a8ea5c46b3f828b1db21f467
SHA25602dc5829df7d73152a5b00366455bad9ff815086f1da1a3d789d160b5d3fc567
SHA512fd9305a1ac1354906727dd298c86366184af64de3552ed56fa1f3edbf17d11e540d6fe6824c56cce046a8687f62c850ccea86e8ef72a1e1be9e48eb22a8da3db