Analysis
-
max time kernel
2340170s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20/12/2023, 03:22
Static task
static1
Behavioral task
behavioral1
Sample
805bce32df90c1e05ec5d86137115f75e2ec8665e3f3098439acf9e33ff0ee42.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
805bce32df90c1e05ec5d86137115f75e2ec8665e3f3098439acf9e33ff0ee42.apk
Resource
android-x64-20231215-en
General
-
Target
805bce32df90c1e05ec5d86137115f75e2ec8665e3f3098439acf9e33ff0ee42.apk
-
Size
145KB
-
MD5
657082dd0b1d7f36ef409b8fab26579b
-
SHA1
082af750a859714ce6d559f2a60aa40718436bb0
-
SHA256
805bce32df90c1e05ec5d86137115f75e2ec8665e3f3098439acf9e33ff0ee42
-
SHA512
29bfda1a9598abfd44fc8fa5d9c33e6fe2cf29761349f56d5156c3ab37a68815fc2e6e15bf186944b13a886616314ca32d9ea16f6cb6be15027ae74c1365b0df
-
SSDEEP
3072:RnDcEgy7IuX5xrtXxTOQC2OhS94/x5VTvkdEeKfZAiq:h9r7B5OhXJ5pAtgq
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr -
pid Process 4917 acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db
Filesize12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db
Filesize16KB
MD50383927cfaa7bdbb5d143d999dc5761e
SHA12d10fa9d41090fbb293fc9a99ef528c1bfa5d712
SHA2563457e26afdacd30279b20d92d87d8e07c93d6b3e1207b376c4e13f8661d7d54a
SHA512502afd0b4affbaff756cde7e86518e00dab3b5475f098cb51ae784b27ba936c5ff24b5fd9ccaca10e887ff6422684687a34a90f441b66b453c47a1474192ec37
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db-journal
Filesize512B
MD5856f496c43b138375bcb76a4db7d32af
SHA1a6ea511ae2d00a777632f8c44f6ca69568a8ab05
SHA256e1b1a045c1cceb4a318377e2aafe33038ff46ce6cc85ec86d05974e567e2220e
SHA51216a769cb420d1db7a101d521f8bdda2762e455a0607d8db162c0a47adfbeeed5185dabcf676d08b2a903058d630a1401c5613717378a08e8e8d955944cc77ed4
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db-journal
Filesize8KB
MD5c388b9f796c19d3e6683c4af89802432
SHA16c94cc583443408dd99e0b40042a3292a3781c40
SHA2568c4068b1b6ec9a54f760703e2eab086658fd60936a4946b9129ab809b2fa01e7
SHA5124640c64ab76ec0c95c35de9b62da3569e8e3f6b304950db6810dd93a56d24acae4b0c9c39b9d081aa14e1480a3465d969e8e6f3e5dfca996e31ad78e332daab7
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db-journal
Filesize8KB
MD5cad66017f23ee3354d679a0e5ee789ab
SHA1ee9d6e1943b726814cd3c1cc14532110b5a9faad
SHA256603d3b8ee5fb22d8374d18bf852106db48218bdc4d819b92bc9e3af76105d004
SHA5127bb2985837cf2655e20a3eabb37706ebbafd2047295d886746527975482c1275b22d2c753d3d1e3a79d105e963be0eef8df2e530e13471e5a7ab908d186ec895
-
/data/data/acy.avsihcujlhameorwdhctculvpsluuxuzyddwhqp.euppywigoielikpkfncxbiazulrdkzjdhgyjr/databases/init.db-journal
Filesize8KB
MD562cf91f2cd08143eec7cbdb0a14d65eb
SHA12485d73b2dc116548116158037435c46e9996c01
SHA256a9d3b931fc95bd9cf5c15e6ef8d2b1e0707e5784508caab2d5763ee8b425578f
SHA512816d52eeb13718569dc152c1d0202de78e14962d3804949bb070443a25da6110f80fa76e0d2b9852aa66c37e1032af4042296aba06703bbf759e7836dde5fbba