Resubmissions

29-11-2023 15:37

231129-s2f61she21 10

29-11-2023 09:40

231129-lm8t6afd9v 10

Analysis

  • max time kernel
    465351s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231122-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231122-enlocale:en-usos:android-13-x64system
  • submitted
    29-11-2023 15:37

General

  • Target

    1st Mall v8.8.apk

  • Size

    20.8MB

  • MD5

    9ad5aac3f171ff14172b19a73eeced34

  • SHA1

    75508a751b36de5ca9d9648e2b88cc0167f452a6

  • SHA256

    969ec0828fa2e80ba7dee9458932fa895eff6f20e629d6a576920e6f038ed2c1

  • SHA512

    213438da9c57b0418737a5c7d504910aea5992a7aa629420ee5bbb5668903b8f7536b4505f1732ba9b7d269d4952b451a25abb13fed8a25b3d634e201a5fbff1

  • SSDEEP

    49152:06jjgiKHUw7hPdlovtdIP5neIr9we1SCuhHmErDem:Bg1HUw3loFixGFem

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • com.android.chrome:privileged_process0
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4294

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
    Filesize

    29B

    MD5

    8398f9685db92ef32b358d39b8df1047

    SHA1

    a1531e795775c3ea86a5e007e7e2df5aa025567f

    SHA256

    ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde

    SHA512

    ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7

  • /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
    Filesize

    29B

    MD5

    8398f9685db92ef32b358d39b8df1047

    SHA1

    a1531e795775c3ea86a5e007e7e2df5aa025567f

    SHA256

    ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde

    SHA512

    ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7

  • /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
    Filesize

    29B

    MD5

    8398f9685db92ef32b358d39b8df1047

    SHA1

    a1531e795775c3ea86a5e007e7e2df5aa025567f

    SHA256

    ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde

    SHA512

    ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7

  • /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
    Filesize

    29B

    MD5

    8398f9685db92ef32b358d39b8df1047

    SHA1

    a1531e795775c3ea86a5e007e7e2df5aa025567f

    SHA256

    ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde

    SHA512

    ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7

  • /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
    Filesize

    264B

    MD5

    f32c49bb07118785861aea04075db8c8

    SHA1

    ce626afbe3ff92584a496418502087427735a7c2

    SHA256

    3e971d93ad384bba4abfa8eac2d02cc778ff0e511852062527fb4736ab83e725

    SHA512

    a7ce9e504b2c01697f059b405c1c9072079d89705dc5217d16337fa520aa24ff406846a9a376f3bcfd84c55eee03dd1fc164c03f7b0c2c51aca9b341a1b99b9f