f42da00a548bc5bfae8514664424b595ef99e417bb3827e0a8ea417d5234928a | Triage

Analysis

max time kernel
3592138s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
04-01-2024 20:08

Sharing

Report Analysis Logs

General

Target

readyapk.apk
Size

3.7MB
MD5

18dd86eccb7ee4796bf12eb6359a6389
SHA1

e4e6d32c59964280d83dddffcb59bc424d0fbdfa
SHA256

f42da00a548bc5bfae8514664424b595ef99e417bb3827e0a8ea417d5234928a
SHA512

0f3af65daa9b1ef51937bf4694f940da7674f4fbfbe4af30dc6962f1bfae0328d8a4ce329facf31b935fe3c7faa404f23860c7ca9ae69bfd5d47f53ceffe1370
SSDEEP

98304:CU4JB3khGshHzCwxGxHE4/LdsumzLzB9TG0tQqcR:oBkXGwxGxHE4/JspzzN6

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

improve.able.raymond

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	improve.able.raymond

Acquires the wake lock 1 IoCs

Processes:

improve.able.raymond

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock improve.able.raymond

improve.able.raymond
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
PID:4982

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Config/sys/apps/log/log-2024-01-04.txt
Filesize
25B

MD5
455606a8ce76478454a9271cf0cd20f8

SHA1
dfd6238c9fb16d16a71a1f7e616d65974bc69036

SHA256
ac0b11d28c0ed6926261a37d2e5fb0ad65550de1817abd40681e3847fa1289f4

SHA512
b8d57cdeed494bb0de7e709bd37d21a9c4781f03bee988287bc93c11a60ac90332838b5a4a8c041173a43123b76863ac1a0ea676c7aec46294c81c136400aa10

Download Submit