Analysis
-
max time kernel
2514120s -
max time network
129s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
20-12-2023 06:52
Static task
static1
Behavioral task
behavioral1
Sample
8d126148c0886b94f2cfebbdf87ec709bdda724e2f9772483b7dbc23baf6cb37.apk
Resource
android-x86-arm-20231215-en
General
-
Target
8d126148c0886b94f2cfebbdf87ec709bdda724e2f9772483b7dbc23baf6cb37.apk
-
Size
8.1MB
-
MD5
07acbbda20097a270e9d7063e2b14e6f
-
SHA1
4e9edc247e9094477d42f756bf4a836e9ea526fc
-
SHA256
8d126148c0886b94f2cfebbdf87ec709bdda724e2f9772483b7dbc23baf6cb37
-
SHA512
c4dd5303adf404184116bd9145fbd45c7c946d583177034b0c4ec03fdf98622b853b1e33373ec9bee836cf102174daa55467f5a97f6d6e36f8782b02e776924a
-
SSDEEP
196608:GN0wlqcOzmzG6GEikCsU8xA5PWcSPj8G6nuL7dhpz1ClTdT2:GGGOzmLjHAFWFAGuuVhpz1sTdi
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.aiaxc.gz:script -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.aiaxc.gz:script -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.aiaxc.gz:script -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.aiaxc.gz:script
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
512B
MD5ac18244da8fa6445d07ecd06425bd4bb
SHA16a8503524e1c3d4e6fdba8e8e9c9aa6e8b9b5c5a
SHA2563afa5d62136060544520ea4618d4158a7b55aa112c0507acf166423664d4f943
SHA51227d855f5d07bd89a17c42318f5c29cda1c10cbd496baaba6b780e20215205ddcc9928bd0a873669cd6a59f4acaa8e6129f4fa9e86c6184fef80387315b078216
-
Filesize
32KB
MD53ca7242dbe43fca7e6ea30882e0eff72
SHA1390efc6779b3255de1d0eadab66f0a45b82a1ffe
SHA2568c2e7a65c44e2e63075559e866d4d4521a460bda2801cc5e1f27100bd122d8fe
SHA512a82fc72c9892094e740391295613bee765849ec15e10e57e1094f889542f99968d15859a96e62490143f435c5956a43fdeec6da2782222f0844da8f8e7cee09e
-
Filesize
56KB
MD5f210842e3a4df805a1049486055d88b4
SHA1aca13398e815b287364b01ef94ddf413de68146f
SHA25648fed8e79a2f25b3337a8b2bc3753018143f572f26cf6f7fd1f0fa04f8193b74
SHA5125ac96fecc367fc4ad5844613e80775d53df8e16918f080cbed84788359d8abc3236feebc18dfc15d23e559e38a2fbdaa190912ed1165393b696570f8f7902b59
-
Filesize
32KB
MD5e44410aec6e37ee46812acef45b7e4b6
SHA1cc9622e6ddbb88ae3e4de61c48087c8ec7fe6f35
SHA256c7958c443c66b4772c9d967c5751784cbca214aa9c5d450ea12c872fe9c614f4
SHA51231994413a8a3db2078c11013de4ae1e7e43066aa22b9dbe001a6b344a230b448707aa743ca88c6982e53b683556fc1860be0d889b74b9030ccbceee753df1fab
-
Filesize
512B
MD519c980f9e02efd08febbf063798fce7f
SHA155c74510f1eb7b8cd359b58979ac83e2a7e5470b
SHA25677a7001e2de606011f5f9f55c6cd994b56d1c2181027c2a74bcaab53a8e86010
SHA512fe00f001f87ff69c9166b40d1bd6616cf9cc3f72b7dce85d4bf3b942bc530de654d7668d3cf547f34a77f8b4ea4043ed01600c2588654a529037afc6dc9827dd
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD50b5243f2c42adcde596124c86206608c
SHA100be5e896e7b4296c44d77a8152b3feee3211e43
SHA256254d6d85d57cc1f3b90b36f8c72bf86e4d48e65cf07ed04d545b702f92dadda4
SHA512018c79d91b9473e70e8a944541377561814dea4c4c87b1a010131e88d45ea1f72b8070f8f4518d6397ce6e1e5aa9ab580668a065907c9a1781a5882886b35873
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD50e5f34013439825938ce6af7b33f0d70
SHA1eeb1c7cbc111668fe5ab98e83b1bfb9db05616fa
SHA2565618535a1d16e587775cc67153c85eabdff2c24dac0aac841abc19c4a9b6bd71
SHA51203ae5afa097827b6df871bcd29120f6ffb7dc089a1690281c555b54393b9dfa386a5238ca7be9bd27ebebccdbbeea386c80576dcf445470ff20af7adbb7196e9
-
Filesize
16KB
MD597904550d9b153fbc79e152de446e529
SHA1d3f22c760b7252e7cce5f9e5fd5eccd037f8c743
SHA25695779c305bf21d4cbaf169623428e17f3ee8305498d190976a926e9c55880637
SHA51201d5fbfeebd49f86f02ed96557e241dc181f33abfa887d59e1799f8f2ceb67e9de454ad550ee641f577cb32aa2eccf8a21f388d28cb07894639424e5b742778d
-
Filesize
4KB
MD593a4bf0f1c395c8749f7cb8dc459fdc7
SHA17813fc1b6df984f860e7ec8dd70d6a66c71b6d44
SHA25676ed1eeffaa2d3b07bcc1071a3cb724f634a5bf96b145e0646b0dc2ddc954fda
SHA5121da44f39b08f505ccd73b7d75e5fe838ffb850cb5fb0bae4cefc2eeaaa8a5b280b70772329a0146d2cc7b320c4a1c3496616b231cb11d3d4eaec07920358dfba
-
Filesize
58B
MD5ebd2c7d6b69e3656b0cada1278ce86bd
SHA1f82ff21d83cb9d1e7833ba2c655f84b510d1b4ac
SHA25627e9d6d76599f0ec0ee15943ce66eea67f7306d04838ef51b0ee876ba1db9559
SHA512c44aa4dd6b3bff4e03254498d80df99a8446ca7fb984fde2e4ed5174ea0d19bb0cecd9952e41b176f453ae7da90e0b40c751e4b9e24e26e06177c450e560ffc1
-
Filesize
1.2MB
MD56e785fd8a939bb2a46602b41e29d05ac
SHA1033a042d33e876835f813a38a04de6ed27acb7cf
SHA25674c804bd3ff3b2aa5b18d308473bc802dd46bcc8aed022b5d672ba8d0e49f311
SHA5121dc02bc314e35606f310893d3b92a6be2332bf4fbf2273dbedfffb75bbd96da24e9a920b735196987384500479e333c44f6bd367432c9ea47a6d489846944d22
-
Filesize
32KB
MD54ff82bd28657c24013efaf511efb34e6
SHA172fb24967a4ada400764dfa53f12604bd88bb988
SHA2568ac7416f6ad55cd93cbd34eb7c9c0fe46c0cb1bf131c954f73362da124833398
SHA512d13099c84bde655b87302d1730b461586bd67b973c6ba66f52807d852bae56e9d307edcc78851981f835fda9c97ffd5b6a21d59d8156a0d728b2a03950415b5b
-
Filesize
262B
MD59295af8e7773c8e86600856e9958667b
SHA1cba7dd155c858e03eac9c1c937a85c5e06f020e6
SHA2568b47a71c9f4abb2373c77745a46d631b7da9f981bc54088b51dd1c126f62d160
SHA5126d58f5eb35aef9dcbe0775c7ae4d4ced97e544dd70985a8bfb280438f8580b7edbac6caad15def86efdf4ead9ca0f16b8915ed8dabfb2a8196c1059b2463ec9f
-
Filesize
773B
MD5c3c473fef1ad4e2cd1cea46ed3c3e640
SHA1694607b12f265faf4831d13b205683b6e551a18a
SHA2561cd4c492dfe3dad5d28bdc034faa3ea42b67bde32d69696c428e70cc66e2fbed
SHA512ab03fa8e9012f6cb595c0e6c0db50091e1efb35821efef2c7215a44974bc0e08cb24764413362f50e34a6df54929c1fa5bd013e8468564eb2239bdbb78788db8
-
Filesize
147KB
MD51a7b49a8ecb2bc31bf10288daa1aa759
SHA19d8dfcf0afbea8b27c3241d32aa7aede2f2aab10
SHA2567b03984c9e00bf7e1c7068eac9d5d91ee042e14a98d14d76d1f7f582505c4570
SHA512addd92a9fbba168cc0556f1a7ecde4c85a6d1f811fe02cd459c25a54f0724cef75f07d6edc28134cf8738c01fac3da68074db5f489a353e176ff32c8ba700c1b
-
Filesize
11KB
MD57f3674225fd3abbe7a015d9316015bf7
SHA10333d67704e0ee4e8f37e66bdd9095ef0f26bec4
SHA25637f1a65e201761d46ecd18b12b2f3d9e4ae265edbd1b43cc6979dbd0fadc8e76
SHA512d6d633a73dac20d10b32c965a6e40d3ff6cf8ff4b966d322625ab78e0f87d2b13093ff776d4c117ec1fa440134ba026bc4b8e7b03136cf728e8b07d13d7e6b88
-
Filesize
2KB
MD513172287eabf7bf219cf24f7b7273369
SHA1e69ed72b8d23e13d647774daa032f2a9af0903ab
SHA256c78049d97b5a9971adb011c0a3e1cd8d43b83b5d4ae9ec4505deb07bd6e395eb
SHA512600cb03de4d9aa6339cb419a2f14843bda6223557782c771ae2d8755e06b624acce45265920cec6f6fb9cccc24da0edef19f80895744ccf68445dfb88458497b
-
Filesize
15KB
MD586a90137db0847615463e944b5712bc3
SHA1db8106f6828de2a375195dcea348bd7aa44d80e3
SHA256cefc2ab4d6d96eacd4d8be708f2d9e59ab093bfb5207f57493d123481bbc950e
SHA5124f966479647b12547ff16a412213be4bcd5d1ae950db35c6be3a492f4dca54ed33d0c19b657f641ba835b908a728138ff20b3bc6265ad1d14583329651b84fae
-
Filesize
10KB
MD5ae0e0881463e4c15278ce6b489f87f54
SHA176854310ef8b547abf6a309999d63e0a41a8493e
SHA2567f9a16b6c06bb10354d501775fe0dbb447d3db01409675c5d2ac6577fc79196d
SHA512a0f16399ab0230aa4e74b6505c3a1a00fe1e4172c491958f55a6d3e3dde7ab59b1bf3a1ab851842048dcb357bcd9edc17d139d7070007e17751cb723ec411070
-
Filesize
11KB
MD5db97edab83e4990dc93f5f859837d9f1
SHA160a6be4adf35981ee5fcec769172a1a17d30d195
SHA256fcc89764b5b5a030251559859bc2877232324d3b899f25e5f3dddbd2e7e669cb
SHA512d2b914c2aff632c7794f0dfa7c5651f7a28b1754a2cfbd18e3df92a2dbc435127bdf1176de1ffc3c883ea837c2c0b62a8d6ca84478676f31098c9a53d3b0c79f
-
Filesize
14KB
MD5096388c9fef0dd270ea71be24ad6dd6b
SHA1e332c69b0fade74e8adb58b6e8f3389c59006c20
SHA256582724d63d59854319e4f48f95b60a3631d8aabf06ed876917a94dcce3ddaaee
SHA512c7ccabb6695c438bb8454d797df2deb4db5b92733b0ca17ed6071eedeeb654770e44b8bd4b4b28e1cfef11d74be27aaa3fc43a51f3cdfd54de7d63b2a1a72d15
-
Filesize
25KB
MD5520e77a902057bb9b19a03a16075504e
SHA1c26cf445066d98d21488646484c8a92cf03b28b1
SHA256ccb828823e58bec753447841d9e7e61d47f40d0ebac5e6724ad9aad2119f67d8
SHA512bdfc76dbb459f435d9c0d9de52be68c30bcafd8093c749cf322e706aa7082150e117b69abd523a332de8193e1eda2ef3b1b52d33c169758253e95a28e8b020a8
-
Filesize
17KB
MD54b7309d156859d4a63281a550b1d0564
SHA1f151ab1750a7f7c7a2019199689497d40a22fcae
SHA256a22aa7aa717c8ffd41a65a89736156e38bca8c685862a06c6837c6a189738b7c
SHA512607ec3ae29c0ed079e3925ef873c4419bb22b3a6d6801ce42307f317ce7bd15a09166072b2e7b00f88fe368e9a465a2b5f74f825ad0564093cf06f9e11903790
-
Filesize
23KB
MD51caf7a86bce6d5e85f24420bc936955a
SHA1f8aa0bdf73585f148c097ec17b043f225f1b5989
SHA256e636c3503034318732c086ef8312fdbdd1f1229874e8f9b65fd61dbd81eba95b
SHA512644343fbc38f2aab5abae22215e78eee30c71efcc541e540a3bb4de8789ef9eb12a365acd246b7ce0cae4c36e438d5fead092c2632302fd73b0607e3aec3e1ad
-
Filesize
18KB
MD513e6c2d7a083e7f0018c6c6b8c5da42d
SHA17f3a15a23a41297ac19eb7562f11429fa70b6e24
SHA2564ff6899a2c62486837a0fc55db42c2b41c1da047183b7c27f42a99c7712ef15f
SHA5128a29ababd80f960258cc32401d9ccd2c80959018141aeb3c264b46cfccf0ec9c5e96b9f46118afbcba41deeb98d8afff100767bc35cb9f7c9081aa1d32fb6640
-
Filesize
5KB
MD5662118ae2522442bf4711c210f6e5d82
SHA115f3ed0b5a5a32b3514bdd9f6a22c9a630180187
SHA2562a44a163c112465d51032183beb993a12c46129990e261e864be48f5100dcea4
SHA512d2279d5539f887dc2ef3f0641fa766dd6bc1f8574d3d21ba7160752a5e7b2df049e3014bf786d915531d74b642041d18bc9e9fb802468fd5b3e2885b77121839