Resubmissions

26/05/2026, 11:06

260526-m7g3lsay4x

26/05/2026, 10:57

260526-m195tagt8j

26/05/2026, 10:53

260526-myzw3aax3v10

03/05/2026, 01:50

260503-b89ngaav6t

01/04/2026, 10:28

260401-mhz7wses81

11/03/2025, 20:07

250311-yv6e8atjx5

19/01/2025, 19:41

250119-yd7a7atkcm

11/02/2024, 02:09

240211-ck4yradd2310

Analysis

  • max time kernel
    150s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    11/02/2024, 02:09

General

  • Target
    childapp.apk
  • Size 61.1MB
  • Sample240211-ck4yradd23
  • SHA256 613dfad45a7696818e1fb73d6892bb52cad7231c305f70db1c9cbbbcfab2c76d
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Loads dropped Dex/Jar 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Acquires the wake lock 1 IoCs

Processes

  • bob.display.aug
    1⤵
    • Makes use of the framework's Accessibility service
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    • Acquires the wake lock
    PID:4252
    • ping -c 1 -W 15 us-gamespot.gl.at.ply.gg
      2⤵
        PID:4570
      • ping -c 1 -W 15 us-gamespot.gl.at.ply.gg
        2⤵
          PID:4614

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            meta_data0

            • Path /storage/emulated/0/AppData/meta_data0
            • Size 7KB
            • SHA256 566fb91b6bf186c05c4ec051aa2e2802961cbb158df24a8fecaa0678febece84
            • MD5 SHA1 SHA512 SSDEEP

            meta_data1

            • Path /storage/emulated/0/AppData/meta_data1
            • Size 4KB
            • SHA256 4830f1d48d41c7725686901a2d4f93a8ea722f6160dfecc6815ac85598e361db
            • MD5 SHA1 SHA512 SSDEEP

            meta_data1

            • Path /storage/emulated/0/AppData/meta_data1
            • Size 3KB
            • SHA256 5a9b87d66daf4ad4791d980d9c3270c7806bc18c89e323472a500fb8ebfefc5e
            • MD5 SHA1 SHA512

            meta_data2

            • Path /storage/emulated/0/AppData/meta_data2
            • Size 5KB
            • SHA256 47bb8e56ea3c98e4a3a8b1e557e8b8d7683683e6657df223907b7c1ef085018f
            • MD5 SHA1 SHA512 SSDEEP

            meta_data2

            • Path /storage/emulated/0/AppData/meta_data2
            • Size 4KB
            • SHA256 9a0285c31c82617f5d5823210791ab57fa29c92ca8107b0fa0e7a7a35be96af8
            • MD5 SHA1 SHA512 SSDEEP

            meta_data3

            • Path /storage/emulated/0/AppData/meta_data3
            • Size 28KB
            • SHA256 725cce101997a2608c3a1b51de805caa6cfd7f9c8c84420d4b68135227b49edc
            • MD5 SHA1 SHA512 SSDEEP

            meta_data4

            • Path /storage/emulated/0/AppData/meta_data4
            • Size 22KB
            • SHA256 30770d032694d585243cf2c108ddb515a11cce020953b3a8d1304d7704101c0a
            • MD5 SHA1 SHA512 SSDEEP

            meta_data5

            • Path /storage/emulated/0/AppData/meta_data5
            • Size 7KB
            • SHA256 d365285ec8822cc96ffa79d9596e03bb0fef3bcff4d2cf9b890340fec6458459
            • MD5 SHA1 SHA512 SSDEEP

            meta_data5

            • Path /storage/emulated/0/AppData/meta_data5
            • Size 9KB
            • SHA256 2b111730487405bef3ad063f3bad8bcbe409fac4ee00c08ce6122b27c6298254
            • MD5 SHA1 SHA512 SSDEEP

            meta_data6

            • Path /storage/emulated/0/AppData/meta_data6
            • Size 5KB
            • SHA256 e15552b3ab0824370ff36e1ee461251d72fef39ab75722a56064259049370b3e
            • MD5 SHA1 SHA512 SSDEEP

            meta_data6

            • Path /storage/emulated/0/AppData/meta_data6
            • Size 3KB
            • SHA256 ad712097c583f970a7490dcd56f6c85fb3398dc6a5922b8477617fb741385eb0
            • MD5 SHA1 SHA512

            meta_data7

            • Path /storage/emulated/0/AppData/meta_data7
            • Size 4KB
            • SHA256 5468034e8a0355df93f6b070a8025304900219588f6c946f4ad37ba5750a53c0
            • MD5 SHA1 SHA512 SSDEEP

            meta_data7

            • Path /storage/emulated/0/AppData/meta_data7
            • Size 3KB
            • SHA256 58d71a9c91d09e4a5e3cbf4c543daf97e8f2ce31295efb6547d3eb535bd9a148
            • MD5 SHA1 SHA512

            log-2024-02-11.txt

            • Path /storage/emulated/0/Config/sys/apps/log/log-2024-02-11.txt
            • Size 13B
            • SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
            • MD5 SHA1 SHA512

            log-2024-02-11.txt

            • Path /storage/emulated/0/Config/sys/apps/log/log-2024-02-11.txt
            • Size 37B
            • SHA256 d3ea95536f320d0a98624c2c6d2238d1aa6127cea4a16c3dfa2612f30bd37a58
            • MD5 SHA1 SHA512

            log-2024-02-11.txt

            • Path /storage/emulated/0/Config/sys/apps/log/log-2024-02-11.txt
            • Size 25B
            • SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
            • MD5 SHA1 SHA512