8ccacda64d010d562dc9f121d4cfb7a6351cc7bf9f052949a888bac3d7a20140

Analysis

max time kernel
538730s
max time network
162s
platform
android_x64
resource
android-x64-arm64-20230831-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
submitted
11-10-2023 11:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ready.apk
Size

680KB
MD5

4079184334f96fa19bb904ab0b334707
SHA1

90781e6f3ff458db9e8f4ef3883f73251adba0d1
SHA256

8ccacda64d010d562dc9f121d4cfb7a6351cc7bf9f052949a888bac3d7a20140
SHA512

090eeeca220a763d989247e07da70b451e2ddefafd2e1d9e1558a391e425528d979161da5856be7416c24725cb0743cef2da204288913084ee7a7b71203553f3
SSDEEP

12288:Rwlbo9GgLRBWItYYyow7HCgI4Zf3n0dF5whzRs911hAsPlno6Rq21/g3Q750YZ:RwlfglBWItYYjwjCgI4p0dFV9DWGlnoY

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

Processes:

cha2.gst.latin

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	cha2.gst.latin
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	cha2.gst.latin
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	cha2.gst.latin

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cha2.gst.latin

pid process

4637 cha2.gst.latin
Acquires the wake lock. 1 IoCs

Processes:

cha2.gst.latin

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock cha2.gst.latin
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
evasion

Processes:

cha2.gst.latin

description ioc process

Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS cha2.gst.latin
Removes a system notification. 1 IoCs
evasion

Processes:

cha2.gst.latin

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag cha2.gst.latin

pid	process
4637	cha2.gst.latin

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	cha2.gst.latin

description	ioc	process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	cha2.gst.latin

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	cha2.gst.latin

cha2.gst.latin
1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4637

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-10-11.txt
Filesize
36B

MD5
2515885c24e452431dc83ba42db61fb2

SHA1
7ab54d62a1287ba425c23f8c7eb9ac591a29a9c0

SHA256
2df9c7a7ad6c9512c4694866f69a1ee66429800caabacf8d926e3ae229976c9c

SHA512
a9936bce00ff35bb514da0ca4a14a38ac1098b05e4e68309bc15dc41cf002c60a97917325b7f5ed11c55e3dad26d7162bf52f43bebdc0c728e9cd9aca8737309

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-11.txt
Filesize
12B

MD5
a9256f55737b655c8cff95418411997c

SHA1
d81a4e85ecef3a4f08d50da9c75c49a3c64ffe24

SHA256
bad705c44807d12463fb587087c4e9eb24769d82981229ac8b74abc9b1a44412

SHA512
10d10a6498973ed65d47c74ba6d8831dad94213a5071353dc445de46e021689284fbbf4accf5ba1f97a0675a7652ec069ac70f38d63ba36b8595a8caf8d37574

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-11.txt
Filesize
12B

MD5
a9256f55737b655c8cff95418411997c

SHA1
d81a4e85ecef3a4f08d50da9c75c49a3c64ffe24

SHA256
bad705c44807d12463fb587087c4e9eb24769d82981229ac8b74abc9b1a44412

SHA512
10d10a6498973ed65d47c74ba6d8831dad94213a5071353dc445de46e021689284fbbf4accf5ba1f97a0675a7652ec069ac70f38d63ba36b8595a8caf8d37574

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-11.txt
Filesize
12B

MD5
a9256f55737b655c8cff95418411997c

SHA1
d81a4e85ecef3a4f08d50da9c75c49a3c64ffe24

SHA256
bad705c44807d12463fb587087c4e9eb24769d82981229ac8b74abc9b1a44412

SHA512
10d10a6498973ed65d47c74ba6d8831dad94213a5071353dc445de46e021689284fbbf4accf5ba1f97a0675a7652ec069ac70f38d63ba36b8595a8caf8d37574

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-11.txt
Filesize
279B

MD5
e4cbf762c041daf9cf6800d912c7f9e4

SHA1
9ebdd132e6f818f1590c154d23ff9d2c082ecaa8

SHA256
da184553cebe458fe5bfa01a9f2da0f0bf0555d665a5a1330ccd96424e263bd5

SHA512
5bd9bde49af8b33cdcd14f2984c37d40a050e3d703d3c8220e3e940a03c1d3aa6748e2f2b89a80f4dda6813a7d2c8ddfa5788232684b98b578f4c6462ae28861

Download Submit