Analysis
-
max time kernel
308s -
max time network
311s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
11-03-2024 18:48
Behavioral task
behavioral1
Sample
xxx.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral2
Sample
xxx.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
xxx.apk
-
Size
4.4MB
-
MD5
5b416a264c452d413954c3c6b2a7f9b2
-
SHA1
c556a2949abb5a01863060869a59c8f6be88f32b
-
SHA256
abd521ec0f2bd43ffc644d260d8c8ff57d9335adf9a667b4ebc00a597402fe35
-
SHA512
d40a5c0746776c2b07f1df063f000712137dba667dd999a18530ce0200a9162c4975f5f54e56366191fd00ef1406df46ade60f260f21118093bb0a74f8f43bf1
-
SSDEEP
98304:zPlRr259qHV7unzkYw6dejpo64mzAzBvTE0t40v/47:rlR894YQYvejpzz03rvm
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
com.whh.premiumdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.whh.premium -
Acquires the wake lock 1 IoCs
Processes:
com.whh.premiumdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.whh.premium
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
17B
MD51c26ecab0d94f2a4b2dfc7bfda43eff0
SHA13c89a227f7d5f3b3db5824c4a707f4438bd74cea
SHA2564b4e3e72c544d8cf6533031bef655dc6f71834c4ec473fa218144a4c0c6014fa
SHA512513cf924f101091eeff27a8950a6913d557ff4d72696e89df869accc3dd1b5f64c9b519782222e412d04ed50388ee3bc4016cb92ce0809bee56234a3acb5a5d5
-
Filesize
29B
MD57962924b10f8c7f077283d86c26a1b33
SHA18cfe59e55017cb51c01535eed265e251c611ac60
SHA256b271c7118a78e7db19914c0c26d172776015a6e72ce9fa908da39948459ad2ea
SHA512bc56fc78ce05c332affdbe75d514acaf34bf1f384ff9e7d0889b0de82feed05e74cc55224ddf0a97847b56179a561a4dc8caaea7e6952282f0724b3371e64aca