Analysis
- max time kernel
465341s - max time network
154s - platform
android_x86 - resource
android-x86-arm-20231023-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system - submitted
29/11/2023, 15:37
Behavioral task
behavioral1
Sample
1st Mall v8.8.apk
Resource
android-x64-20231023.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
1st Mall v8.8.apk
Resource
android-x64-arm64-20231023-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
1st Mall v8.8.apk
Resource
android-33-x64-arm64-20231122-en
4 signatures
150 seconds
General
- Target 1st Mall v8.8.apk
- Size 20.8MB
- Sample231129-s2f61she21
- SHA256 969ec0828fa2e80ba7dee9458932fa895eff6f20e629d6a576920e6f038ed2c1
- MD5 9ad5aac3f171ff14172b19a73eeced34
- SHA1 75508a751b36de5ca9d9648e2b88cc0167f452a6
- SHA512 213438da9c57b0418737a5c7d504910aea5992a7aa629420ee5bbb5668903b8f7536b4505f1732ba9b7d269d4952b451a25abb13fed8a25b3d634e201a5fbff1
- SSDEEP 49152:06jjgiKHUw7hPdlovtdIP5neIr9we1SCuhHmErDem:Bg1HUw3loFixGFem
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId telescope.essays.precision Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId telescope.essays.precision -
pid Process 4241 telescope.essays.precision - Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock telescope.essays.precision - Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS telescope.essays.precision - Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag telescope.essays.precision
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
- Size 29B
- SHA256 ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde
- MD5 8398f9685db92ef32b358d39b8df1047
- SHA1 a1531e795775c3ea86a5e007e7e2df5aa025567f
- SHA512 ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
- Size 29B
- SHA256 ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde
- MD5 8398f9685db92ef32b358d39b8df1047
- SHA1 a1531e795775c3ea86a5e007e7e2df5aa025567f
- SHA512 ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
- Size 29B
- SHA256 ec95da19463ef809a63980f82489be34710e889f23f7adf06707ec698eeb4dde
- MD5 8398f9685db92ef32b358d39b8df1047
- SHA1 a1531e795775c3ea86a5e007e7e2df5aa025567f
- SHA512 ea8c4142a67d70cc234c50059f6dd597d9505d6f57749ac0ed04e5f342eeb028232c60ee33974373e1d63f82dc5b264cc55a00126380a972f14c49855efad1a7
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
- Size 25B
- SHA256 2d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af
- MD5 ba30336bf53d54ed3c0ea69dd545de8c
- SHA1 ce99c6724c75b93b7448e2d9fac16ca702a5711f
- SHA512 eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2023-11-29.txt
- Size 284B
- SHA256 e7505b64e5ef98e887efb4cbbdea7cbd79f464686364f73dc59ac34459582588
- MD5 2a5db5c063d87e1d159c0f4756e1b120
- SHA1 1ef6903a07599820b7f84b2504de5c1af92312f6
- SHA512 4f9f48affbba4c198e2adb2b3c8dec54db408bbec4a26ef54c4ea4ff351573e2f0a28d83a67490c934a6107e1e09b8a9ebf6f8fa0b5c9e1964002d92d5c7b6ad
- MD5 SHA1 SHA512