Analysis
-
max time kernel
2197954s -
max time network
145s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
19-12-2023 13:26
Static task
static1
Behavioral task
behavioral1
Sample
32add2fcb6364cc8b3c2343b3940f98d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
32add2fcb6364cc8b3c2343b3940f98d.apk
Resource
android-x64-20231215-en
General
-
Target
32add2fcb6364cc8b3c2343b3940f98d.apk
-
Size
999KB
-
MD5
32add2fcb6364cc8b3c2343b3940f98d
-
SHA1
b01ff05841555d1a9724011b0dd62eb3cbea14af
-
SHA256
9e945ebd56d1ec80f1ea98cd16ff40ece788e4c51f11152a17943051ba5a2ffd
-
SHA512
c0c2bbaa9b9f7f043a5125f3fdeb38c7514c72d885d02f2490debeacbdb4479ba13cf69fec5ddaf8c51e99032b0713fa893f642fbf49abadb9fe857d9a39fe6b
-
SSDEEP
24576:Wa2uW+MI4hJQJpkUf1WKi/8+eAX/QlKloxsL9ddS5YrIvn:CuWfbhJQj/f1KU+Y4loxgS5Y8/
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.xocvwnowpqn.vbswxt Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.xocvwnowpqn.vbswxt -
pid Process 4995 com.xocvwnowpqn.vbswxt -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xocvwnowpqn.vbswxt/app_files/iwuhnajbdo.jar 4995 com.xocvwnowpqn.vbswxt -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.xocvwnowpqn.vbswxt -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.xocvwnowpqn.vbswxt
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
185KB
MD591838b3b4c7d4ad37cb91ae57a0766a2
SHA149374763ee0931e93d6d1917e7f4c0fa4cc10f8b
SHA2564289b4fee1d94b55410a6d88a4a253533d36f5c29d639f44a3bc59100bf6d91e
SHA512234907ae67bf52114e5dc33640d6755f2cb05aa6cb93f20e4d056a0e091a4c414d43eb72c20af80bb1e3f39a1af67d2be6e2d0ee54a9eb5715d5b627f5f6383c
-
Filesize
370KB
MD5e407c09bba6612a7ec9de47b0888a3c1
SHA1b10704316e55e70e6ec9ed752f9a519939897080
SHA256e8e0ccc403bbdd14f33bb919af6dafbfb141ec5d8cf074b5301c287360f198c3
SHA5128bcbc0f298574412058caaf746c3fc27d1d8db74bd24d34063d5056635216fa56871c2e7d8cc0c22a278e8e7431b99e9e00308f8ad5738079f690bab5767efe7