Analysis

  • max time kernel
    2197954s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    19-12-2023 13:26

General

  • Target

    32add2fcb6364cc8b3c2343b3940f98d.apk

  • Size

    999KB

  • MD5

    32add2fcb6364cc8b3c2343b3940f98d

  • SHA1

    b01ff05841555d1a9724011b0dd62eb3cbea14af

  • SHA256

    9e945ebd56d1ec80f1ea98cd16ff40ece788e4c51f11152a17943051ba5a2ffd

  • SHA512

    c0c2bbaa9b9f7f043a5125f3fdeb38c7514c72d885d02f2490debeacbdb4479ba13cf69fec5ddaf8c51e99032b0713fa893f642fbf49abadb9fe857d9a39fe6b

  • SSDEEP

    24576:Wa2uW+MI4hJQJpkUf1WKi/8+eAX/QlKloxsL9ddS5YrIvn:CuWfbhJQj/f1KU+Y4loxgS5Y8/

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.xocvwnowpqn.vbswxt
    1⤵
    • Makes use of the framework's Accessibility service
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4995

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xocvwnowpqn.vbswxt/app_files/iwuhnajbdo.jar

    Filesize

    185KB

    MD5

    91838b3b4c7d4ad37cb91ae57a0766a2

    SHA1

    49374763ee0931e93d6d1917e7f4c0fa4cc10f8b

    SHA256

    4289b4fee1d94b55410a6d88a4a253533d36f5c29d639f44a3bc59100bf6d91e

    SHA512

    234907ae67bf52114e5dc33640d6755f2cb05aa6cb93f20e4d056a0e091a4c414d43eb72c20af80bb1e3f39a1af67d2be6e2d0ee54a9eb5715d5b627f5f6383c

  • /data/user/0/com.xocvwnowpqn.vbswxt/app_files/iwuhnajbdo.jar

    Filesize

    370KB

    MD5

    e407c09bba6612a7ec9de47b0888a3c1

    SHA1

    b10704316e55e70e6ec9ed752f9a519939897080

    SHA256

    e8e0ccc403bbdd14f33bb919af6dafbfb141ec5d8cf074b5301c287360f198c3

    SHA512

    8bcbc0f298574412058caaf746c3fc27d1d8db74bd24d34063d5056635216fa56871c2e7d8cc0c22a278e8e7431b99e9e00308f8ad5738079f690bab5767efe7