Analysis

  • max time kernel
    101s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    02/03/2024, 05:00

General

  • Target
    038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
  • Size 5.3MB
  • Sample240302-fnbm6aah72
  • SHA256 038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.jiuloisetp.muvhbmbajhun
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4479
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/oat/x86/dnpnhn.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4504

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dnpnhn.jar

        • Path /data/data/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
        • Size 113KB
        • SHA256 6a40b4f8944440e88edeee34dac0b5c9729cec698f3222ced36ab8e6c6545ffd
        • MD5 SHA1 SHA512 SSDEEP

        dnpnhn.jar

        • Path /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
        • Size 269KB
        • SHA256 cae9d60f8ffd0cfd2629ed2fedb90429a1ee6ef00c40ed1a8fa6890b81313356
        • MD5 SHA1 SHA512 SSDEEP

        dnpnhn.jar

        • Path /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
        • Size 269KB
        • SHA256 1d146f21dbefa1aa1457915d091c1f3bbb1328ae5332cf40a81afca215e67696
        • MD5 SHA1 SHA512 SSDEEP