935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029

Analysis

max time kernel
2438741s
max time network
161s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
20-12-2023 08:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029.apk
Size

5.6MB
MD5

1d5e5f4ec3bdaa2c9fe55e51010edc26
SHA1

dca7444f1f9fd3f07894bdb1b2b78ec58e6eee85
SHA256

935731d1be5be9bb02ea2c147c24231ae71271a4afacb6728e62904f67291029
SHA512

d38eb6bc23c32a3b6eb26634ba2158b43d6da5a0672cfb376c77867c3fc90f9a94ea14b62361c4706940b2cb60e577bd2c66e9f4b0c6e866276854184bd6ef5a
SSDEEP

98304:aXqblT3h/tjtU6GAoNX2OnR03JhSv8TAA4DaoHuZzVBL9fp:VblT3ltBBAlnMc441uzfn

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

com.app.adsadwqe

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.app.adsadwqe
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.app.adsadwqe

Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.app.adsadwqe

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.app.adsadwqe
Acquires the wake lock 1 IoCs

Processes:

com.app.adsadwqe

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.app.adsadwqe

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.app.adsadwqe

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.app.adsadwqe

com.app.adsadwqe
1⤵
- Makes use of the framework's Accessibility service
- Requests enabling of the accessibility settings.
- Acquires the wake lock
PID:4622

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.app.adsadwqe/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/user/0/com.app.adsadwqe/files/localdb.db

Filesize
12KB

MD5
e7179ba1abb576a1eb3486db34de4037

SHA1
4dc87664c9be3d7a94d4886b7f56f4a8d7b983dd

SHA256
409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f

SHA512
50ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a

Download Submit
/data/user/0/com.app.adsadwqe/files/localdb.db

Filesize
8KB

MD5
dbbca7ce545dcdc50fbd7fda23b6f4b4

SHA1
d297ea382c7695fbca6264bd224901e9df999eec

SHA256
a267a83d3b4c39ef163e2ccf6d9dca47a4264cd5d714825b717747f4916fca93

SHA512
24bf03682628a40b1303116c2744d0766852f36b11c72f2907ee2a72c49137bb886b32972d4d46c40a6cfe2a38f2780b86f0d08213750dfe5a0c32cc76af21d6

Download Submit
/data/user/0/com.app.adsadwqe/files/localdb.db-journal

Filesize
8KB

MD5
c96b1e0ed9f496a9d377fdc7db887a6a

SHA1
a1026c2a4be1d8c106c666d7a848d86778fd1b55

SHA256
6ca9fb61f08eee76da52b1a11c030abf768dea0e7d10566f5b71935d159a9988

SHA512
ed826cf79e036dec96106277f58283920b297edc17206f86c560956e32a75eb81703073c520dc3834775d7bec3e096a3310ab3ce23580540f34d072961cedc03

Download Submit
/data/user/0/com.app.adsadwqe/files/messdb.db

Filesize
8KB

MD5
57a39108426ea4fb8e5bc74accc22a88

SHA1
73f83c87418acba44a084cb7055fc5c34f6cf25e

SHA256
9d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2

SHA512
f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a

Download Submit