Analysis
-
max time kernel
3592138s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
04-01-2024 20:08
Behavioral task
behavioral1
Sample
readyapk.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
readyapk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
readyapk.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
readyapk.apk
-
Size
3.7MB
-
MD5
18dd86eccb7ee4796bf12eb6359a6389
-
SHA1
e4e6d32c59964280d83dddffcb59bc424d0fbdfa
-
SHA256
f42da00a548bc5bfae8514664424b595ef99e417bb3827e0a8ea417d5234928a
-
SHA512
0f3af65daa9b1ef51937bf4694f940da7674f4fbfbe4af30dc6962f1bfae0328d8a4ce329facf31b935fe3c7faa404f23860c7ca9ae69bfd5d47f53ceffe1370
-
SSDEEP
98304:CU4JB3khGshHzCwxGxHE4/LdsumzLzB9TG0tQqcR:oBkXGwxGxHE4/JspzzN6
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
improve.able.raymonddescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId improve.able.raymond -
Acquires the wake lock 1 IoCs
Processes:
improve.able.raymonddescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock improve.able.raymond
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2024-01-04.txtFilesize
25B
MD5455606a8ce76478454a9271cf0cd20f8
SHA1dfd6238c9fb16d16a71a1f7e616d65974bc69036
SHA256ac0b11d28c0ed6926261a37d2e5fb0ad65550de1817abd40681e3847fa1289f4
SHA512b8d57cdeed494bb0de7e709bd37d21a9c4781f03bee988287bc93c11a60ac90332838b5a4a8c041173a43123b76863ac1a0ea676c7aec46294c81c136400aa10