Analysis
- max time kernel
2261115s - max time network
383s - platform
android_x86 - resource
android-x86-arm-20231215-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system - submitted
20/12/2023, 10:22
Behavioral task
behavioral1
Sample
IntesaToken.apk
Resource
android-x86-arm-20231215-en
3 signatures
1800 seconds
General
- Target IntesaToken.apk
- Size 4.5MB
- Sample231220-melv4adbc9
- SHA256 11470b5107f563c19ab92929a0e0ee5cf1b0c95fdd146f69ff9f9d4123f908cb
- MD5 bb2d3c26762eaa3b9c0bc1915dfe8ca0
- SHA1 11b00c50bdafd9d9a2effcd4e51655689afb0b84
- SHA512 97f40d5953d2bd9edd378fdcaf53fd0dba0aee4696c9828fbe4723a949c5c999ec292c05463180ecd672b764822d7bd4eca45fbf058b4d6f0f35ccf943cc5f2d
- SSDEEP 98304:V9hinlhin6Vhinahinx1hin6hinshinUhintH5WIdd/c1/f2+CID1QgB:VbCzC6DC8CxjCcCyCKCtH/ooID1vB
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.intesatoken.appnuova Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.intesatoken.appnuova - Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.intesatoken.appnuova - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.intesatoken.appnuova
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.intesatoken.appnuova/cache/1
- Size 309B
- SHA256 4e5ab1c0cb9c537b3b4f64f1e7477151971ae9d53df6ae0c4404c9a8f824f44c
- MD5 cad0d927c3585c0e21688980f14315a6
- SHA1 17c76f4c6fe4bc006c3d5b9e6a5d4a37d8db2041
- SHA512 c42000b1e16bfa2d316fd626f4d7ceab1c985e7257ed68bb3bcfa68f7356bc6e4bd125b09b0952a189aa522234d6fc1c56feac5a842cc1f7b8ae3c278dda697e
- MD5 SHA1 SHA512
- Path /data/data/com.intesatoken.appnuova/cache/~test.test
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /data/data/com.intesatoken.appnuova/files/db.db
- Size 40KB
- SHA256 c4ddb071f51d8ccf2ae17406c75498de55d820371a8b28c77197a127d131863c
- MD5 c9ba8af2c46cfab6a421f96b0c7a4aba
- SHA1 7cf335d13973adb71de16c9683c65326e04d0107
- SHA512 0fb0dc739a67f5dca3872f616adbbf361a82075411e17a3d6be06d7d52126b284f2119524d9ea47c251d77752b4802727d1499f015977616dc8ddcdd40309afd
- SSDEEP 768:0HfElv4qwABf91C8A6H0nVVS1/TpI6uPqk3:KfElvKS9BH0Vc1/Tp/uiQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.intesatoken.appnuova/files/db.db
- Size 4KB
- SHA256 4ac83031e1631aba670f1a1b79050e28f8b5769cbd9b2fe3d0ed64f999938856
- MD5 23a900124cc1be12cb153919436e517e
- SHA1 c3090005da02b93ca8a6a3261ab2f57e0c4252c8
- SHA512 5846481036919c99f172ac88632af94d6f0c9b548baa92623136c9c80e7dd64c3c8f5835cf33fef0638f7bcd72146e696019a11243297df165c82e8f5985b259
- MD5 SHA1 SHA512
- Path /data/data/com.intesatoken.appnuova/files/db.db-journal
- Size 4KB
- SHA256 7f68a30dd6f45de11cef5186076c0e7e5f4062794821da571d51668a414ec293
- MD5 2fd6dd8dcabd912acc54d6ae1bf28506
- SHA1 22585d7c7fa26b1997517d061bafaf879462a441
- SHA512 2828799d2b52af369745eafc3240e3c9c40602629ce49d7b756a1569466828cb993c989b3338e577b0d97efd85d963fa5f4a113bcd636e7d5832daa7a9eeac68
- SSDEEP 24:7+tIqLSlx4uB20Rfo5H38SGIVe5nX2XQiHX4SM:7MIqax4Yvfo5HMSXVe5nX2XQiHoSM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.intesatoken.appnuova/files/db.db-shm
- Size 28KB
- SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
- MD5 cf845a781c107ec1346e849c9dd1b7e8
- SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
- SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.intesatoken.appnuova/files/loading.gif
- Size 121KB
- SHA256 2013f490d45638cada331b3474ed65b9a43cec60da773accc98332e58c06336d
- MD5 7b38720a0352dffa26411726c72dd2b0
- SHA1 b15e687f42abcdc12427f146a3115ef2259211f8
- SHA512 0df28f87da4f9beb3ca8c108f54021a2a1a1434771abbb5ba67a2736097f2287b05e5220a33e92c42ee13ecae1144714a422b986763712794f69e65bc44c83e3
- SSDEEP 3072:81n2uAzV0cftN6MU7jz1R41WweslBLcukGifI:MnyzN3i/z1wWweskfI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.intesatoken.appnuova/files/txtscreensize.txt
- Size 11B
- SHA256 2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89
- MD5 1b65c10c6215685f9d621d797f911373
- SHA1 cc50aaed5cd521a62ec8cf9fe0413153ec90f265
- SHA512 5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f
- MD5 SHA1 SHA512