Analysis
-
max time kernel
152s -
max time network
162s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
12-02-2024 07:36
Behavioral task
behavioral1
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
34f11498a63702624b00f2ebb539bffe.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
34f11498a63702624b00f2ebb539bffe.apk
-
Size
3.7MB
-
MD5
34f11498a63702624b00f2ebb539bffe
-
SHA1
ed44b3fa02c59d5de52c20150fc36544a4f90e24
-
SHA256
26deae5dbb13c1a2476fbef7c93e454338c6c39fe922a5911e30650242054e0c
-
SHA512
72345e060738814f4a4299c3b65a89f9bf823119fa8e4a77bc935cb18757f93b25ac5287bfac14ce47dc0a942840512a16cd7f3b2f08d311b1f10948e52ae5ac
-
SSDEEP
98304:OLhDsOCjLRbZphj7Q6kGnemgYmzbzBvTE0twc:IhDspfRbNkoNCzJ39
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId increased.lithuania.carrier -
Acquires the wake lock 1 IoCs
Processes:
increased.lithuania.carrierdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock increased.lithuania.carrier -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
increased.lithuania.carrierdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS increased.lithuania.carrier
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
33B
MD5e964096015fa28d99c39a83f0f54a8b0
SHA1d2c3b35692b2bbd21f2ef12c94128dbb4527516b
SHA256d04d5384027b720fccf556138a57dcdbb610f5e67498ac96d54b85c9e07ab247
SHA5128cf2fde266cc5846048b33e5452e35cac778664e6a5bd2c6ef0d03a45b74857a537cc713ba5eeaed4bb580d1a981e35e7bec2f3cc73c83ccda163e7246c1cacb
-
/storage/emulated/0/Config/sys/apps/log/log-2024-02-12.txtFilesize
49B
MD57561846ed6ea4340898957991dc6e02a
SHA19d64906cdb61381761647eb307e6e2ac038af5f0
SHA256e9e3313e97b0422a7714048373b50291394b60a4e1d1921d3d78ef16da4a5d5b
SHA512dd7ecf7463a6d7f54868d290b5fa2e97afc4c20d9c94b3e08b03307dd6af4e39ed61e6d07299e636238f186b2f32e568220442d3a899c6aa1a54d237059f6f59