Analysis
-
max time kernel
1044241s -
max time network
309s -
platform
android_x64 -
resource
android-x64-arm64-20231023-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system -
submitted
06-12-2023 08:20
Behavioral task
behavioral1
Sample
c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk
Resource
android-x86-arm-20231023-en
Behavioral task
behavioral2
Sample
c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk
Resource
android-x64-20231023.1-en
Behavioral task
behavioral3
Sample
c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk
Resource
android-x64-arm64-20231023-en
General
-
Target
c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de.apk
-
Size
3.7MB
-
MD5
ea6d041d4ce8f712c04826c1fb1de8d7
-
SHA1
447f3a6265bf2e16476e50fe84c35a70de9490cb
-
SHA256
c1f2d43ac38e3bcf221a016c8a26de9881e5c1244441a8e9e891e2fa16df68de
-
SHA512
c85d426f3265a4af506225e76db1c9b0efff778ab95fafea1ba003ddaefa29d231d195539fdd79a15cc0b0e21cb1cb60f99981f40c1e6a3b37b3c6230f4cb48c
-
SSDEEP
49152:lHySLPmNObjqKiAu2nvMEaAmmPtLd/WvSmzczdGG5QTOy1UJYqX0cgIIfZik3l8:FbiNOq2nvvaVOZ/qSmzczB2Tm0tIIpl8
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
Processes:
snapshot.str.wrappingdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId snapshot.str.wrapping -
Acquires the wake lock. 1 IoCs
Processes:
snapshot.str.wrappingdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock snapshot.str.wrapping -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
snapshot.str.wrappingdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS snapshot.str.wrapping -
Removes a system notification. 1 IoCs
Processes:
snapshot.str.wrappingdescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag snapshot.str.wrapping
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2023-12-06.txtFilesize
33B
MD5e881e51d70274f6deaef533fef75009f
SHA1443b06fc087675135f56dfff752937e02fabb452
SHA25631ee53db37b85f5adedce899683a359065e63f81efa2f506ce420a419849810c
SHA5125457ed9acbbbba5cc5572c32e2c88ad7c19ef25b62a08c30ba73ce0f5f3d1956c22d7f16d2bfaab427ac522d834c54891d36c50663262399b1c20b3e40ec5fb0