Analysis
- max time kernel
151s - max time network
169s - platform
android_x64 - resource
android-x64-arm64-20231215-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system - submitted
30/01/2024, 14:07
Behavioral task
behavioral1
Sample
63890a15099a0debd9ed2a3b2036c956.apk
Resource
android-x86-arm-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
63890a15099a0debd9ed2a3b2036c956.apk
Resource
android-x64-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
63890a15099a0debd9ed2a3b2036c956.apk
Resource
android-x64-arm64-20231215-en
2 signatures
150 seconds
General
- Target 63890a15099a0debd9ed2a3b2036c956.apk
- Size 4.5MB
- Sample240130-rezjeahghj
- SHA256 afa3c43141a5b6f2473d49cdfa0bce1bf0af235a40f3ec092299287291137841
- MD5 63890a15099a0debd9ed2a3b2036c956
- SHA1 d4cabb3e134a518c88e4856e63756806161d8e3b
- SHA512 97cbf6d49c024ac73b81295909b3ed800f4d583baf9cd2013c81aff6a41ebc50cda6d22eb8083ef82397c133b4bf8247b9cecfa7c6a4e4117f10cc9423a4f98c
- SSDEEP 98304:Gr/9hinlhin6Vhinahinx1hin6hinshinUhinXqlfMBbzebtd+cGVqbCoP8p:KbCzC6DC8CxjCcCyCKCXqC4tdvCxp
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.bnltokenappnuova.app Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.bnltokenappnuova.app - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.bnltokenappnuova.app
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.bnltokenappnuova.app/files/db.db
- Size 40KB
- SHA256 c4ddb071f51d8ccf2ae17406c75498de55d820371a8b28c77197a127d131863c
- MD5 c9ba8af2c46cfab6a421f96b0c7a4aba
- SHA1 7cf335d13973adb71de16c9683c65326e04d0107
- SHA512 0fb0dc739a67f5dca3872f616adbbf361a82075411e17a3d6be06d7d52126b284f2119524d9ea47c251d77752b4802727d1499f015977616dc8ddcdd40309afd
- SSDEEP 768:0HfElv4qwABf91C8A6H0nVVS1/TpI6uPqk3:KfElvKS9BH0Vc1/Tp/uiQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.bnltokenappnuova.app/files/loading.gif
- Size 121KB
- SHA256 2013f490d45638cada331b3474ed65b9a43cec60da773accc98332e58c06336d
- MD5 7b38720a0352dffa26411726c72dd2b0
- SHA1 b15e687f42abcdc12427f146a3115ef2259211f8
- SHA512 0df28f87da4f9beb3ca8c108f54021a2a1a1434771abbb5ba67a2736097f2287b05e5220a33e92c42ee13ecae1144714a422b986763712794f69e65bc44c83e3
- SSDEEP 3072:81n2uAzV0cftN6MU7jz1R41WweslBLcukGifI:MnyzN3i/z1wWweskfI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.bnltokenappnuova.app/files/txtscreensize.txt
- Size 11B
- SHA256 2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89
- MD5 1b65c10c6215685f9d621d797f911373
- SHA1 cc50aaed5cd521a62ec8cf9fe0413153ec90f265
- SHA512 5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f
- MD5 SHA1 SHA512