e1c7783612bedec7e0bbb23c3ce1cb27d9e98a2f00011dd3278265ef24a878e4

Resubmissions

29-10-2023 21:54

231029-1r6b6ahd6z 10

Analysis

max time kernel
2104671s
max time network
318s
platform
android_x64
resource
android-x64-arm64-20231023-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
submitted
29-10-2023 21:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ready.apk
Size

2.7MB
MD5

601d17eca85258467d75191129b7b7d4
SHA1

ce1fd8a628c78dd97a488ff7170a5ee244bc084e
SHA256

e1c7783612bedec7e0bbb23c3ce1cb27d9e98a2f00011dd3278265ef24a878e4
SHA512

97f2ba85ec1c0c8592080edb68bde160ba9798e9db1facbd9c3505f6d49b06b03622341502e0946b22900fb3d802fa84cc7ebb349705fbda1a4392d4fefd394f
SSDEEP

49152:JbF1MIp8lMlTRaJdSIjAfZOb29BKN9dALbQ7R4ChN/3IK1sI6LInYN809eOya0aI:JbF7p86lNauU6ZOb290GLbdChiL7N80e

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 2 IoCs

Processes:

associated.fitting.hebrew

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	associated.fitting.hebrew
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	associated.fitting.hebrew

Acquires the wake lock. 1 IoCs

Processes:

associated.fitting.hebrew

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock associated.fitting.hebrew
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
evasion

Processes:

associated.fitting.hebrew

description ioc process

Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS associated.fitting.hebrew
Removes a system notification. 1 IoCs
evasion

Processes:

associated.fitting.hebrew

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag associated.fitting.hebrew

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	associated.fitting.hebrew

description	ioc	process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	associated.fitting.hebrew

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	associated.fitting.hebrew

associated.fitting.hebrew
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4326

associated.fitting.hebrew:remote
1⤵
PID:4660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-10-29.txt

Filesize
37B

MD5
357a8a672ed8b84ecc6c090e71eb8406

SHA1
d2becf72e056e04461de5a3918f8caf7c9340231

SHA256
2cf798b63f2ee68b36bd602a39da4f6660a872f2834bf7e761ef17e43f1d0807

SHA512
6b8090dd5301d4f17b0fec9a740d60db9fe294c6aafc7f4bba80d60039c6941738f783e4f7f858e064c25906c86cc74e6716b387d720afd9b6cc28ae31828fb7

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-29.txt

Filesize
57B

MD5
a9ec0c42a43c72d73c499e5c17ccbb8b

SHA1
731652fbfe61eac3fdb4b9d3e2eaa010848a0906

SHA256
6c5309ce3f31c9af3288b0de3305b7f5ddee97be60ca4ac1184f3c334480c05b

SHA512
5f8ed24a51f68cfa0627aceb9190d3a7febaee61bd5a89898ab113ddaa7ce2a41f129a28c4e200d5e5e4ddff7a483abc0393dc38e870782caf1c46d2ec0df2e3

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-29.txt

Filesize
37B

MD5
b4e75c2e79bac8512550785ad396bb58

SHA1
16d9064da5c92ae5cecf0307467b3573ac1bae72

SHA256
59f34c8963ac5f7c8e41fa9fcb7956ffd96b12f5819722e0a9e9a0b5902a88e4

SHA512
3d0736e81669514662d45511141856b12bc2824bb180ee592abafbe8333145b9888537f9b075ecb247c3751610b747136ef836b7885d3fc0c13d0de94f91cbde

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-29.txt

Filesize
37B

MD5
b4e75c2e79bac8512550785ad396bb58

SHA1
16d9064da5c92ae5cecf0307467b3573ac1bae72

SHA256
59f34c8963ac5f7c8e41fa9fcb7956ffd96b12f5819722e0a9e9a0b5902a88e4

SHA512
3d0736e81669514662d45511141856b12bc2824bb180ee592abafbe8333145b9888537f9b075ecb247c3751610b747136ef836b7885d3fc0c13d0de94f91cbde

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-10-29.txt

Filesize
292B

MD5
dea22deee078a73feb48e14da0364d63

SHA1
70df76e006dd257a6bb230fe959243c22ad7cfbf

SHA256
8177e28404b04f367575871f1fe3fcf315dcd81ded658ba3b70593027480917f

SHA512
70fe5cd36ab55d5e554d7c3f3c531b7ccb7d53371ba7884d34c20b0634ae6c901fbf163d33e8d19e29ff07196b54ef9ec1bf55d473b5a50d8d7297a3db6eeb55

Download Submit