abd521ec0f2bd43ffc644d260d8c8ff57d9335adf9a667b4ebc00a597402fe35

Analysis

max time kernel
307s
max time network
314s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
11-03-2024 18:42

Target

xxx.apk
Size

4.4MB
MD5

5b416a264c452d413954c3c6b2a7f9b2
SHA1

c556a2949abb5a01863060869a59c8f6be88f32b
SHA256

abd521ec0f2bd43ffc644d260d8c8ff57d9335adf9a667b4ebc00a597402fe35
SHA512

d40a5c0746776c2b07f1df063f000712137dba667dd999a18530ce0200a9162c4975f5f54e56366191fd00ef1406df46ade60f260f21118093bb0a74f8f43bf1
SSDEEP

98304:zPlRr259qHV7unzkYw6dejpo64mzAzBvTE0t40v/47:rlR894YQYvejpzz03rvm

Score

8^/10

Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

com.whh.premium

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.whh.premium

Acquires the wake lock 1 IoCs

Processes:

com.whh.premium

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.whh.premium

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.whh.premium

com.whh.premium
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
PID:5113

/storage/emulated/0/Config/sys/apps/log/log-2024-03-11.txt
Filesize
13B

MD5
de2c41a51ee9246eb1708f65b511add0

SHA1
2f442d634c8a18760a232c8829d4b5d74a52f074

SHA256
ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

SHA512
7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2024-03-11.txt
Filesize
37B

MD5
68958bdb3ef336ceae6cfe318d2890d8

SHA1
483fd45dffa2dbc5985a3663121af0580ba4bf57

SHA256
88a471df27409127d1b88585624c900ba8a849288d19d385c59e0915713bf58b

SHA512
7c02aeb36b951ec12d9c1f503ad6ec25a2562c2e4ed3fbc99ebf9828756c2cd1e0d0f7e8d54d86577d289c07d3bc4b9ebf9c19ff92ea0b19bde9258c8a5902a8

Download Submit
/storage/emulated/0/Config/sys/apps/log/log-2024-03-11.txt
Filesize
41B

MD5
5a5bd4a0ae4afc5bfc69014ca5297d0b

SHA1
5beba33d1f368d2af8a3901a26d787f8e38b7579

SHA256
8f8cb4c67331729c70a6fcdeac6f7d61ea324658d37dba1d8d44f4fcfa3642a2

SHA512
ae8c470ee21b09bb2a9f311c07aeb1f2b37d870a061c6b8993a9027189b5b343bb2de678f6fb3d92bd136f4824cb34cc56f194bf567118a5cd7b6508557e47b6

Download Submit