Analysis
-
max time kernel
150s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
12-02-2024 07:36
Behavioral task
behavioral1
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
34f11498a63702624b00f2ebb539bffe.apk
-
Size
3.7MB
-
MD5
34f11498a63702624b00f2ebb539bffe
-
SHA1
ed44b3fa02c59d5de52c20150fc36544a4f90e24
-
SHA256
26deae5dbb13c1a2476fbef7c93e454338c6c39fe922a5911e30650242054e0c
-
SHA512
72345e060738814f4a4299c3b65a89f9bf823119fa8e4a77bc935cb18757f93b25ac5287bfac14ce47dc0a942840512a16cd7f3b2f08d311b1f10948e52ae5ac
-
SSDEEP
98304:OLhDsOCjLRbZphj7Q6kGnemgYmzbzBvTE0twc:IhDspfRbNkoNCzJ39
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId increased.lithuania.carrier -
Acquires the wake lock 1 IoCs
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock increased.lithuania.carrier -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
increased.lithuania.carrierdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS increased.lithuania.carrier
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
33B
MD5e964096015fa28d99c39a83f0f54a8b0
SHA1d2c3b35692b2bbd21f2ef12c94128dbb4527516b
SHA256d04d5384027b720fccf556138a57dcdbb610f5e67498ac96d54b85c9e07ab247
SHA5128cf2fde266cc5846048b33e5452e35cac778664e6a5bd2c6ef0d03a45b74857a537cc713ba5eeaed4bb580d1a981e35e7bec2f3cc73c83ccda163e7246c1cacb