a105aaf08fca29d9c9e9ea959330a8d505775138e6d1957efb7e70ed8173ec8f

Analysis

max time kernel
1044042s
max time network
106s
platform
android_x86
resource
android-x86-arm-20231023-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
submitted
06-12-2023 08:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk
Size

3.7MB
MD5

ea6d041d4ce8f712c04826c1fb1de8d7
SHA1

447f3a6265bf2e16476e50fe84c35a70de9490cb
SHA256

c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de
SHA512

c85d426f3265a4af506225e76db1c9b0efff778ab95fafea1ba003ddaefa29d231d195539fdd79a15cc0b0e21cb1cb60f99981f40c1e6a3b37b3c6230f4cb48c
SSDEEP

49152:lHySLPmNObjqKiAu2nvMEaAmmPtLd/WvSmzczdGG5QTOy1UJYqX0cgIIfZik3l8:FbiNOq2nvvaVOZ/qSmzczB2Tm0tIIpl8

Score

8^/10

evasion

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

Processes:

snapshot.str.wrapping

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	snapshot.str.wrapping
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	snapshot.str.wrapping
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	snapshot.str.wrapping

Acquires the wake lock. 1 IoCs

Processes:

snapshot.str.wrapping

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock snapshot.str.wrapping
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
evasion

Processes:

snapshot.str.wrapping

description ioc process

Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS snapshot.str.wrapping
Removes a system notification. 1 IoCs
evasion

Processes:

snapshot.str.wrapping

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag snapshot.str.wrapping

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	snapshot.str.wrapping

description	ioc	process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	snapshot.str.wrapping

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	snapshot.str.wrapping

snapshot.str.wrapping
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4279

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
Filesize
33B

MD5
6b94bea08ec89adfe4d3881d4a0f5219

SHA1
14e92ba374ec92e9955bd8d30ab52a66f9da2e98

SHA256
b860abf383a68809b1da0742522251936f569a317c82052747f83c6ea0cd62c9

SHA512
fa33b75c4e7fadad785fe2db27dcead6ac050ad0500ec651d3deff00cffc800af7ece3e72f93d066538587a7df398f833dde8f964f5273fd6a71f79933e80568

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
Filesize
29B

MD5
7420ef2ef8de80145f9eed0be78fd78b

SHA1
2394ab0d7de60907466028129b79224df43ba98c

SHA256
c022307bc0bf7422553d8ecd8305138c8bb847dcbb99f23685c806f3148d826b

SHA512
1d779949b5b75c900c53ad83c78a8eac7352f80aa5023fe6d97160a72871d4b3fc0b16bef2f34659c93b723817812a0c80e1395a61faaa01f44f2722b1156c6c

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
Filesize
33B

MD5
365f074d64faad2f0f0c7784608e5b57

SHA1
2105b80d01621cbd370bec93f73709a7b67d565b

SHA256
0c4662ed55fc03738e7903864ed0249c921b8f2d858531577eebd53501237cc4

SHA512
d29b5c16d10a78b386ba1f4882f7e80bc6d41887671abe6a36c746b015ea280d4a26f3d2af323b4ad755c256e5851a5b95d0bda8882c6c0a2c125bc748fab47a

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
Filesize
41B

MD5
8f2f902b1ea3ccc87bf20449eb2441eb

SHA1
37c099845934701b25562a47971e1d6e32ba5180

SHA256
eb6b14415dfd0fb6203749fe27e69c2e92eace24a69a7659ada2dafd5f111971

SHA512
593a302813b99dc4e3316d15f7290165bbcc18e2ab90b21d7ecd354bc2c0345ec7caf4ad6b5c8f06be7dff304179b147585decd7c7223e290c2adf5f37cd544e

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
Filesize
989B

MD5
9b0e449618fd34cd656dfb4f812efa34

SHA1
afa8523be17ca7fa16a3c1f9de686070bb55d71e

SHA256
681eef0ad86064e47d02b2ffcfcc7582c19be35ac5335851af3adae2f39a7426

SHA512
da3f482ec52fd1cc44566dd617affe11fa35e34eac781b57f3bc553b6993b8eda97c4638e4826ff49e796041c5d489f5bfde5a6b9e82c49f78bea39fb67f52e5

Download Submit