Analysis
-
max time kernel
2884076s -
max time network
1805s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
27-12-2023 14:39
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
ready.apk
-
Size
8.5MB
-
MD5
55ff2e2bba0834105c862b6c7a8b3d96
-
SHA1
a346e97fe61493a0b0c003616521c2e6fa5b6b7f
-
SHA256
8f792d342af445088e67e557d891a540b38dbba37ff8417f4b238d6a6c33cce3
-
SHA512
673364d6c9124e19b6fac8fc419cb539828587042858c4d0282b27fa0711f5f3c29d6e3ab4ece18af1fe4c0e7b9bde664171385670eef18c3764ae68272c2208
-
SSDEEP
49152:cCnrb63HIJu3XArNvBILPKTgd8r6djLFiwUU7gOOkZmznzdGGMQTOlmUWYqU0cgW:ccOXIJrxsCGhEpU7gmZmznzBrTk0t41
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
earnings.nine.playboydescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId earnings.nine.playboy -
Tries to add a device administrator. 1 IoCs
Processes:
earnings.nine.playboydescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN earnings.nine.playboy -
Acquires the wake lock 1 IoCs
Processes:
earnings.nine.playboydescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock earnings.nine.playboy
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2023-12-27.txtFilesize
25B
MD58966fb42148b41d430ba6c752662bd99
SHA1a5d1f69f715edd569fd3fa2d332c7d74bc8e4d35
SHA2566992b18cbea13e2db53abacac8b43a98b4b0b89887cec502ed09fd457dc9ed0b
SHA512918f575a6dc252fb7b6c892e94dd765101a0c98a29db8de2008cc5c4f0650a384ebaea2d86f0cdbe0faf72b5ea3067dbed7101d11570086af17395f7316a11c4