Analysis
-
max time kernel
153s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
12-02-2024 07:36
Behavioral task
behavioral1
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
34f11498a63702624b00f2ebb539bffe.apk
-
Size
3.7MB
-
MD5
34f11498a63702624b00f2ebb539bffe
-
SHA1
ed44b3fa02c59d5de52c20150fc36544a4f90e24
-
SHA256
26deae5dbb13c1a2476fbef7c93e454338c6c39fe922a5911e30650242054e0c
-
SHA512
72345e060738814f4a4299c3b65a89f9bf823119fa8e4a77bc935cb18757f93b25ac5287bfac14ce47dc0a942840512a16cd7f3b2f08d311b1f10948e52ae5ac
-
SSDEEP
98304:OLhDsOCjLRbZphj7Q6kGnemgYmzbzBvTE0twc:IhDspfRbNkoNCzJ39
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId increased.lithuania.carrier -
Acquires the wake lock 1 IoCs
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock increased.lithuania.carrier
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
33B
MD5b3d53d1e5444e325503c3ca9e20fa98b
SHA15b1af3d7bc5ed2624b929320be73a1b82f212d57
SHA2564dff6f6a48d8814fdc703b7356356c15334184401b31e7c4578da85bd481077e
SHA512a890904d4d3f889a1b7e7a56b4d3d5c1deb4b6e9a0f25d1bce9227c0a9cf2bc3ccb9bfc3ddba7b8151d0b823835340ef0c719120c7d6e883bf7ccc2466835864
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
49B
MD57561846ed6ea4340898957991dc6e02a
SHA19d64906cdb61381761647eb307e6e2ac038af5f0
SHA256e9e3313e97b0422a7714048373b50291394b60a4e1d1921d3d78ef16da4a5d5b
SHA512dd7ecf7463a6d7f54868d290b5fa2e97afc4c20d9c94b3e08b03307dd6af4e39ed61e6d07299e636238f186b2f32e568220442d3a899c6aa1a54d237059f6f59
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
33B
MD5e964096015fa28d99c39a83f0f54a8b0
SHA1d2c3b35692b2bbd21f2ef12c94128dbb4527516b
SHA256d04d5384027b720fccf556138a57dcdbb610f5e67498ac96d54b85c9e07ab247
SHA5128cf2fde266cc5846048b33e5452e35cac778664e6a5bd2c6ef0d03a45b74857a537cc713ba5eeaed4bb580d1a981e35e7bec2f3cc73c83ccda163e7246c1cacb