Analysis

  • max time kernel
    1044241s
  • max time network
    309s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    06-12-2023 08:20

General

  • Target

    c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk

  • Size

    3.7MB

  • MD5

    ea6d041d4ce8f712c04826c1fb1de8d7

  • SHA1

    447f3a6265bf2e16476e50fe84c35a70de9490cb

  • SHA256

    c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de

  • SHA512

    c85d426f3265a4af506225e76db1c9b0efff778ab95fafea1ba003ddaefa29d231d195539fdd79a15cc0b0e21cb1cb60f99981f40c1e6a3b37b3c6230f4cb48c

  • SSDEEP

    49152:lHySLPmNObjqKiAu2nvMEaAmmPtLd/WvSmzczdGG5QTOy1UJYqX0cgIIfZik3l8:FbiNOq2nvvaVOZ/qSmzczB2Tm0tIIpl8

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Removes a system notification. 1 IoCs

Processes

  • snapshot.str.wrapping
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Removes a system notification.
    PID:4360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txt
    Filesize

    33B

    MD5

    e881e51d70274f6deaef533fef75009f

    SHA1

    443b06fc087675135f56dfff752937e02fabb452

    SHA256

    31ee53db37b85f5adedce899683a359065e63f81efa2f506ce420a419849810c

    SHA512

    5457ed9acbbbba5cc5572c32e2c88ad7c19ef25b62a08c30ba73ce0f5f3d1956c22d7f16d2bfaab427ac522d834c54891d36c50663262399b1c20b3e40ec5fb0