Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    21/02/2024, 22:03

General

  • Target

    043de43bd8d5cd0585514ceed9559d50d42b67e7272735b9185b31d586c05ab3.apk

  • Size

    76KB

  • MD5

    88e0238e1b87118e6c9e979ba218ed1a

  • SHA1

    f0b36e8cf095991846de18c849a51888b9ccc1dd

  • SHA256

    043de43bd8d5cd0585514ceed9559d50d42b67e7272735b9185b31d586c05ab3

  • SHA512

    930d2d52f228423f4464ae95479d525d8eb7d296164e5747281190d1925530efcc3fb7f102fcea533613674e4c736929be004b4d986bb2032ee125a7dd7711e9

  • SSDEEP

    1536:VVhSLjCGHNhmJp7lQu/CY6TGQUgM0+nTiMkr6zDXftIYndUJMGm:VVheeGtkp7SuKE0+nrm8hUJMD

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • android.quality.service.sruu
    1⤵
    • Makes use of the framework's Accessibility service
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:5047

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/android.quality.service/files/Factory/Plugins/oat/classes.dex.cur.prof

          Filesize

          183B

          MD5

          2f1c9a7da4b356fbebd5c5ee3587232b

          SHA1

          5736505e75eb44b292b050fbfdea23934a891bfe

          SHA256

          d75c28f94bb92fead8937cf1f145455f04676b58a1076c0733c7b7073dd02821

          SHA512

          8342f2bd71a80713437eb355af21a4a6863ed031cdab665393269a319053a09bfeaaee4b96c13862705a3e257eef40d8fa5ffd7c8f05be10aeb39368b3596074

        • /data/user/0/android.quality.service/[email protected]

          Filesize

          123KB

          MD5

          bd895b012a4cd9aca714454e9cff2fed

          SHA1

          d0dbf7c211d06c6c25e7c74dfb773afdfd10959c

          SHA256

          e364a3b18b65343c4f3ab290b90b4b6b6ebe9f0cf32c67d1648160df2b413307

          SHA512

          287cce57e7847143ab2db81fbd2e15dd5273c9355f9c00035bb2f366356eab6a6651ee167500f26fcc2d01054eea467896d09c82e1d1d3b5058adb22f5fde1d8