Analysis
-
max time kernel
2884005s -
max time network
1802s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
27-12-2023 14:39
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
ready.apk
-
Size
8.5MB
-
MD5
55ff2e2bba0834105c862b6c7a8b3d96
-
SHA1
a346e97fe61493a0b0c003616521c2e6fa5b6b7f
-
SHA256
8f792d342af445088e67e557d891a540b38dbba37ff8417f4b238d6a6c33cce3
-
SHA512
673364d6c9124e19b6fac8fc419cb539828587042858c4d0282b27fa0711f5f3c29d6e3ab4ece18af1fe4c0e7b9bde664171385670eef18c3764ae68272c2208
-
SSDEEP
49152:cCnrb63HIJu3XArNvBILPKTgd8r6djLFiwUU7gOOkZmznzdGGMQTOlmUWYqU0cgW:ccOXIJrxsCGhEpU7gmZmznzBrTk0t41
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
earnings.nine.playboydescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId earnings.nine.playboy -
Acquires the wake lock 1 IoCs
Processes:
earnings.nine.playboydescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock earnings.nine.playboy
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33B
MD50d570b93520e76e1030055e83588e2ea
SHA12eea950c60099e8f122d96bac2f7318633a365d3
SHA2566f1ab7b18e672b1391ed7922fa34060c873922f0c09ea2f6ad02e177e28b9602
SHA512f9a4c2769c1b6b4fe604a4a8139583d770706b69d4a58f8777e07d5f5586acae3c832572bef96eee18d423d95d594ad8071af139431c1b9de31c5072c9cdf17f
-
Filesize
25B
MD5ba30336bf53d54ed3c0ea69dd545de8c
SHA1ce99c6724c75b93b7448e2d9fac16ca702a5711f
SHA2562d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af
SHA512eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e
-
Filesize
21B
MD540fcf48a4ecdb632240619eb756772ce
SHA183706b0dcc3ff8032962dcd0d73a36ba65dd6f30
SHA256d153cc76e9f7a12c26dbe0d197285a77fc8efeed1b1f3d35c25ba386711b5c80
SHA5124757ed0904a24ed77c8c2dca9be96f084cebc54a93c43eb0eb27545aba7e58916abb0b639254d90ebffea1e760b85d0a0fe53ada28194734748116475dd9829b
-
Filesize
57B
MD5b8e1a18ae1de2434434c1408b5d207a9
SHA179f0c0e8224ff640718a619960ca0d39cb83bf4c
SHA25601894766253888eb5b49ad1a1ea1e29afc0ce90f166fb74ed8f920cea3be0d2a
SHA5120ea49cdf335d15964ce6cd07b2c2f3f70d0fdd02ab3160fa6ece25cb96c7ce65dd75ea5d3c806af80db64b0069e4ebf63aa496826d52a9bc1d6b3420d3dc22d1