Analysis

  • max time kernel
    23s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    02/03/2024, 05:00

General

  • Target
    038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e.apk
  • Size 5.3MB
  • Sample240302-fnbm6aah72
  • SHA256 038000aa704b98f988e032d47a151524d4bbf47a63a0129d3f984711d5497e0e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.jiuloisetp.muvhbmbajhun
    1⤵
    • Makes use of the framework's Accessibility service
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    • Acquires the wake lock
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4605

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dnpnhn.jar

        • Path /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
        • Size 113KB
        • SHA256 6a40b4f8944440e88edeee34dac0b5c9729cec698f3222ced36ab8e6c6545ffd
        • MD5 SHA1 SHA512 SSDEEP

        dnpnhn.jar

        • Path /data/user/0/com.jiuloisetp.muvhbmbajhun/app_files/dnpnhn.jar
        • Size 269KB
        • SHA256 1d146f21dbefa1aa1457915d091c1f3bbb1328ae5332cf40a81afca215e67696
        • MD5 SHA1 SHA512 SSDEEP