Analysis

  • max time kernel
    152s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12-02-2024 07:36

General

  • Target

    34f11498a63702624b00f2ebb539bffe.apk

  • Size

    3.7MB

  • MD5

    34f11498a63702624b00f2ebb539bffe

  • SHA1

    ed44b3fa02c59d5de52c20150fc36544a4f90e24

  • SHA256

    26deae5dbb13c1a2476fbef7c93e454338c6c39fe922a5911e30650242054e0c

  • SHA512

    72345e060738814f4a4299c3b65a89f9bf823119fa8e4a77bc935cb18757f93b25ac5287bfac14ce47dc0a942840512a16cd7f3b2f08d311b1f10948e52ae5ac

  • SSDEEP

    98304:OLhDsOCjLRbZphj7Q6kGnemgYmzbzBvTE0twc:IhDspfRbNkoNCzJ39

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Acquires the wake lock 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

Processes

  • increased.lithuania.carrier
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4474

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txt
    Filesize

    33B

    MD5

    e964096015fa28d99c39a83f0f54a8b0

    SHA1

    d2c3b35692b2bbd21f2ef12c94128dbb4527516b

    SHA256

    d04d5384027b720fccf556138a57dcdbb610f5e67498ac96d54b85c9e07ab247

    SHA512

    8cf2fde266cc5846048b33e5452e35cac778664e6a5bd2c6ef0d03a45b74857a537cc713ba5eeaed4bb580d1a981e35e7bec2f3cc73c83ccda163e7246c1cacb

  • /storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txt
    Filesize

    49B

    MD5

    7561846ed6ea4340898957991dc6e02a

    SHA1

    9d64906cdb61381761647eb307e6e2ac038af5f0

    SHA256

    e9e3313e97b0422a7714048373b50291394b60a4e1d1921d3d78ef16da4a5d5b

    SHA512

    dd7ecf7463a6d7f54868d290b5fa2e97afc4c20d9c94b3e08b03307dd6af4e39ed61e6d07299e636238f186b2f32e568220442d3a899c6aa1a54d237059f6f59