935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029

Analysis

max time kernel
2438669s
max time network
155s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 08:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029.apk
Size

5.6MB
MD5

1d5e5f4ec3bdaa2c9fe55e51010edc26
SHA1

dca7444f1f9fd3f07894bdb1b2b78ec58e6eee85
SHA256

935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029
SHA512

d38eb6bc23c32a3b6eb26634ba2158b43d6da5a0672cfb376c77867c3fc90f9a94ea14b62361c4706940b2cb60e577bd2c66e9f4b0c6e866276854184bd6ef5a
SSDEEP

98304:aXqblT3h/tjtU6GAoNX2OnR03JhSv8TAA4DaoHuZzVBL9fp:VblT3ltBBAlnMc441uzfn

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

com.app.adsadwqe

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.app.adsadwqe
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.app.adsadwqe

Acquires the wake lock 1 IoCs

Processes:

com.app.adsadwqe

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.app.adsadwqe

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.app.adsadwqe

com.app.adsadwqe
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.app.adsadwqe/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.app.adsadwqe/files/localdb.db

Filesize
12KB

MD5
e7179ba1abb576a1eb3486db34de4037

SHA1
4dc87664c9be3d7a94d4886b7f56f4a8d7b983dd

SHA256
409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f

SHA512
50ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a

Download Submit
/data/data/com.app.adsadwqe/files/localdb.db

Filesize
8KB

MD5
fc3626a0d8b10bca9de73b05c990cd52

SHA1
331f585ab4ca721583dd37d248b4773968f56648

SHA256
a6af04f2ffcf72222e8b4e8bb87f1250e347e86e6ac605e30263880dcf6a7412

SHA512
b4e68dbba65b15dcb2add34ca1f47c91f22242be8af669c5d8533e4cfd4fa012bdbd09f5ceef72d91b02860539cbdbb008bdd1923e5bd7fed96198d9a273a9ff

Download Submit
/data/data/com.app.adsadwqe/files/localdb.db-journal

Filesize
8KB

MD5
6fd18e3db4a4510b4a20dc5440148aa4

SHA1
e574c6028125d78682ce3b96db5e691e8e4f9dd1

SHA256
c8d49c367c90dc63f7bd6a85a8ee3245d75f33f112b6d983b7e3d535462d51be

SHA512
d7a5b75cfdc963bcfd1990da91e67358ec74a5e6fe8a5de99e916f961a7139f6fb6168a451c2ae108140aa7e0532f5524910f25151cdf7a244322866e518d2f6

Download Submit
/data/data/com.app.adsadwqe/files/localdb.db-journal

Filesize
8KB

MD5
6f5782017ca2c865dc81b7e6de11819c

SHA1
cb3e39db6b3400c64ef97a6c61f4a2db86e0bbfc

SHA256
f884ee359cf1966b8cf102ec28973497de87a5978ad88b7197538aad43db6046

SHA512
7a6988817f1f42073a2d1efe114b81a0b2b6b6588959eedf44c3a2b59014b2d23f4b651c83d3a1e30a73a6b1ae25ef03a035d82c09db5603df36c7c018c808fe

Download Submit
/data/data/com.app.adsadwqe/files/messdb.db

Filesize
8KB

MD5
57a39108426ea4fb8e5bc74accc22a88

SHA1
73f83c87418acba44a084cb7055fc5c34f6cf25e

SHA256
9d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2

SHA512
f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a

Download Submit