Analysis
- max time kernel
149s - max time network
159s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
09/02/2024, 10:13
Behavioral task
behavioral1
Sample
71c85d6fabe4573403f5597d616daa41.apk
Resource
android-x86-arm-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
71c85d6fabe4573403f5597d616daa41.apk
Resource
android-x64-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
71c85d6fabe4573403f5597d616daa41.apk
Resource
android-x64-arm64-20231215-en
2 signatures
150 seconds
General
- Target 71c85d6fabe4573403f5597d616daa41.apk
- Size 4.5MB
- Sample240209-l85pmaca83
- SHA256 28323f93a6657363a0637341358303485d2cf240995457fc8393fb6b74f10d30
- MD5 71c85d6fabe4573403f5597d616daa41
- SHA1 e60ca1915484b60022b302508d766205512c6765
- SHA512 20f99fb99acbd37fc2e563c5a7ab5eac5b138a32dd74ee92174acdf29289d04acf9ee3a6e7728c8d99f6553e3d295606e5dff4e08c3dff4fde6ffa5d3c0710ee
- SSDEEP 98304:irpOhinKhin6ShinphinxuhinFhinrhinPhinCMdAY5AHMLoU0HfIJ9fAxFg:4gCMC6kCHCxACTCFCZCCW3LoFHcfAxC
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.bnlapppnuova.scarica Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.bnlapppnuova.scarica - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.bnlapppnuova.scarica
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bnlapppnuova.scarica/cache/1
- Size 309B
- SHA256 4e5ab1c0cb9c537b3b4f64f1e7477151971ae9d53df6ae0c4404c9a8f824f44c
- MD5 cad0d927c3585c0e21688980f14315a6
- SHA1 17c76f4c6fe4bc006c3d5b9e6a5d4a37d8db2041
- SHA512 c42000b1e16bfa2d316fd626f4d7ceab1c985e7257ed68bb3bcfa68f7356bc6e4bd125b09b0952a189aa522234d6fc1c56feac5a842cc1f7b8ae3c278dda697e
- MD5 SHA1 SHA512
- Path /data/data/com.bnlapppnuova.scarica/cache/~test.test
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /data/data/com.bnlapppnuova.scarica/files/db.db
- Size 40KB
- SHA256 39ced8a590d3e71780b7d787db9b98065d9cd7a9f987dda085fb837a012cff8d
- MD5 0f846d61a922fcd3852c7241f99dc9bc
- SHA1 2198433f3a500dcf88048096d0dbdb9f26b7ce47
- SHA512 d2380af9ad7c68ffdca1745f6dc3f747cc5ff5622ad1c6a1b1af79267c8d3d1f28fe6e01c435797a77309ec31ce085a3c6866503b01bc9850f679ffb34ea3c08
- SSDEEP 384:iRdnIq91C8966I0C/wVUCBpS1/TpJSCFaz6RoPDPMjMzSPtQ3:iZ91C8A6I0nVVS1/TpI6uPqk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.bnlapppnuova.scarica/files/loading.gif
- Size 121KB
- SHA256 2013f490d45638cada331b3474ed65b9a43cec60da773accc98332e58c06336d
- MD5 7b38720a0352dffa26411726c72dd2b0
- SHA1 b15e687f42abcdc12427f146a3115ef2259211f8
- SHA512 0df28f87da4f9beb3ca8c108f54021a2a1a1434771abbb5ba67a2736097f2287b05e5220a33e92c42ee13ecae1144714a422b986763712794f69e65bc44c83e3
- SSDEEP 3072:81n2uAzV0cftN6MU7jz1R41WweslBLcukGifI:MnyzN3i/z1wWweskfI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.bnlapppnuova.scarica/files/txtscreensize.txt
- Size 11B
- SHA256 2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89
- MD5 1b65c10c6215685f9d621d797f911373
- SHA1 cc50aaed5cd521a62ec8cf9fe0413153ec90f265
- SHA512 5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f
- MD5 SHA1 SHA512