Analysis

  • max time kernel
    619s
  • max time network
    627s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240229-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
  • submitted
    13-03-2024 05:01

General

  • Target

    123.apk

  • Size

    5.2MB

  • MD5

    4a7074be0eaf02cab534172d550079ce

  • SHA1

    60b60d8c87b745cf8b9be4cf9d7dd7ea4c8090b3

  • SHA256

    9a639e3e157ce046f26e0a21f4579d8cce73f9bc75af83cac18e0f8706b1aa51

  • SHA512

    e2f05ccd3dc6905074cdff6c8ac04f7cc060d0b22261509a18d5563183fd89bef54753a12af32970b8695ee82b0a4f438d304e143cd87680a704f4504f245bf4

  • SSDEEP

    98304:P7KbvmiyfC291AUJTAMKKd7fmx+mzwzB9T20t04O+C6w8geIx:P7K4q2DjJT4KdbWZzS9DEogp

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Acquires the wake lock 1 IoCs

Processes

  • com.whh.premium
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    PID:4288

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2024-03-13.txt

    Filesize

    13B

    MD5

    de2c41a51ee9246eb1708f65b511add0

    SHA1

    2f442d634c8a18760a232c8829d4b5d74a52f074

    SHA256

    ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

    SHA512

    7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

  • /storage/emulated/0/Config/sys/apps/log/log-2024-03-13.txt

    Filesize

    17B

    MD5

    52d2c7822c37d525b4c10877045f95c2

    SHA1

    da38cc8febd06c8f86149bfc06a912975cdb388b

    SHA256

    3fc18356e10e6322da4c0ad05c728712323acbeca278c538a4fedd108e39b8e0

    SHA512

    74014261db259046ef799e4e880ef78684af32c5e0151aaafbd2a9277d55ed201e0ffc622ec22330d084aa053015c835a86b1799bf7b2b6af327bc5dce0ee413

  • /storage/emulated/0/Config/sys/apps/log/log-2024-03-13.txt

    Filesize

    37B

    MD5

    9749192580b2ea878f269ff1664b2d65

    SHA1

    1672bf5830064ec049195bc4493d8e77be2cad9d

    SHA256

    db5760c25427f8ca5dd0f92b51c4d5d248621393ea5e33558d44adf8b2066d3b

    SHA512

    353be6a6b7e13b0a7a91161539a0541e0c9a0868c06e5c40f53182deee46363ddcf60a3f0e07191c5f7c83f128c8fcc39c91f3e7ecc32480970b163f892d18bc

  • /storage/emulated/0/Config/sys/apps/log/log-2024-03-13.txt

    Filesize

    25B

    MD5

    bdb821a955117250611e94cd23842584

    SHA1

    81edcea1b44f94cfc140710c8410d0696b760c67

    SHA256

    076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d

    SHA512

    e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268