Analysis
- max time kernel
21s - max time network
149s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
02/03/2024, 05:00
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
Resource
android-x86-arm-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
Resource
android-x64-arm64-20240221-en
7 signatures
150 seconds
General
- Target 038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
- Size 5.3MB
- Sample240302-fnbm6aah72
- SHA256 038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e
- MD5 6f90284633a8e9f2fe0c7bb2cfa258c7
- SHA1 148a6d0cc6814fa5bb5eee93dce0a388de77b5ea
- SHA512 21b582226f9921d3ce0e95b9c1e883c90aa1834af352fbe91c681ff9e5f9a997db1fe07340c8f8316858434d66d8ebbd0664da7f6a53f3a524288aae2ec2989d
- SSDEEP 98304:hP+9LmmbHK99L7t+RQFJzykV/s4RmqiuwWmVz4eelcVVprOnUSZ95rRR/kR/6:hm9dK9n6MZV/5mOwWmZwlgnr4USZ95rj
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.jiuloisetp.muvhbmbajhun Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.jiuloisetp.muvhbmbajhun -
pid Process 5037 com.jiuloisetp.muvhbmbajhun - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar 5037 com.jiuloisetp.muvhbmbajhun - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.jiuloisetp.muvhbmbajhun - Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.jiuloisetp.muvhbmbajhun
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
- Size 113KB
- SHA256 6a40b4f8944440e88edeee34dac0b5c9729cec698f3222ced36ab8e6c6545ffd
- MD5 404deac24df52483a6ea7316a33a4c4a
- SHA1 ed3bed00167de2681fe386852e750857cb0d6de0
- SHA512 449da48a7dbb76fe3816bf9aa402bb405dc3f548c132aa5428f86738edb15cac5b9f817598ef4725d417385f28f5614e5c6d56985013e266cb58fd7ba3808abe
- SSDEEP 1536:79qtl0J5udrUXd24N60ajYyfDbhg+JTR0GapfC2fzyUOixRWzpFEaZFpRoLnwOps:798l0idk2CKYwDhVuGaiPRZFpRoLFBy7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
- Size 269KB
- SHA256 1d146f21dbefa1aa1457915d091c1f3bbb1328ae5332cf40a81afca215e67696
- MD5 ac3c7b0fc285726faf277d0ff88a75ac
- SHA1 3672018540dc8f1ac74dea67230924ba71872295
- SHA512 63f949ccb8a957caece9e054e20ea7518f98b584e29482224f046c546b6cd08b6ee83ca62a04157d395305816fc684f15ec5f930a9d6e3b84a5349550b253569
- SSDEEP 6144:JEFG50oGFJg5wrKYrcOMWc49J4fbfkpJ0:uFZogg5w0/p4YfbfkpJ0
- MD5 SHA1 SHA512 SSDEEP