Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    22-03-2024 22:01

General

  • Target

    878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5.apk

  • Size

    4.4MB

  • MD5

    6eb2123c58bb283790a43b5fdaef1c25

  • SHA1

    67deca3fe3025a3b384240aa76c8c986818b21ea

  • SHA256

    878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5

  • SHA512

    d6362dbffb762fba634159a7f390595fcd77574e47a6b338a65b4080a379d3a983fe00c0bf8a7f2f513ba0397538d52c712376246d02385300a70ee6a7f0676a

  • SSDEEP

    98304:Lhinlhin6Vhinahinx1hin6hinshinUhinh3vkBcgOjq6lJC1Em770k:lCzC6DC8CxjCcCyCKChf0OjjGkk

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Acquires the wake lock 1 IoCs

Processes

  • com.ibl.apk
    1⤵
    • Makes use of the framework's Accessibility service
    • Makes use of the framework's foreground persistence service
    • Acquires the wake lock
    PID:4268

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ibl.apk/cache/1

    Filesize

    309B

    MD5

    cad0d927c3585c0e21688980f14315a6

    SHA1

    17c76f4c6fe4bc006c3d5b9e6a5d4a37d8db2041

    SHA256

    4e5ab1c0cb9c537b3b4f64f1e7477151971ae9d53df6ae0c4404c9a8f824f44c

    SHA512

    c42000b1e16bfa2d316fd626f4d7ceab1c985e7257ed68bb3bcfa68f7356bc6e4bd125b09b0952a189aa522234d6fc1c56feac5a842cc1f7b8ae3c278dda697e

  • /data/data/com.ibl.apk/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/com.ibl.apk/files/db.db

    Filesize

    40KB

    MD5

    0f846d61a922fcd3852c7241f99dc9bc

    SHA1

    2198433f3a500dcf88048096d0dbdb9f26b7ce47

    SHA256

    39ced8a590d3e71780b7d787db9b98065d9cd7a9f987dda085fb837a012cff8d

    SHA512

    d2380af9ad7c68ffdca1745f6dc3f747cc5ff5622ad1c6a1b1af79267c8d3d1f28fe6e01c435797a77309ec31ce085a3c6866503b01bc9850f679ffb34ea3c08

  • /data/data/com.ibl.apk/files/db.db

    Filesize

    4KB

    MD5

    32d50418eb9cc48b26054a251a525252

    SHA1

    312ecef70715199403f3064a023bc5096e91e7af

    SHA256

    997ea84efb161887ea79b89a23a421bf2be0b3eae61c3c0e273cc5be4c8482e4

    SHA512

    e5ebdf900167404a1e742db16df6323858139eda2ebf02cb7927941ab82167e3a44ec02022161ba517d4a8fc71bc54c0c4618cb9ae517763e9f3ab8e343bd41e

  • /data/data/com.ibl.apk/files/db.db-journal

    Filesize

    4KB

    MD5

    d155ab4a0a1a5fb9c7eee39f80ecb9bb

    SHA1

    bdf32336d3a3c990bd160be32a2379d096412ea0

    SHA256

    43eed574bce315fe87612addfd7b1cc988fecbf3151cb2aeeb04e66939b2dc4e

    SHA512

    5909131f7f16faced309f61d55b3fee4c3a9367d4ba1dc5f8c24daf33f58f3ff1c6f4408f7875618e7ca1741b491cfbe4ae53523b291531d95a230542e1b53da

  • /data/data/com.ibl.apk/files/loading.gif

    Filesize

    11KB

    MD5

    3b410e587b90cc366d961a412a87d66f

    SHA1

    a0d7f04026670eb33eb51b4f882c13e423e5437c

    SHA256

    12a675972116561df733e5aa651ca2a85e1fd4ebd56bb96bc84f35b2b932e60a

    SHA512

    df88972bfd94d089f226f660c27680b57d1aecd72f67dcc226662a6fab2e10535d02b9c49a292166246906593a710bcc0493e9dd5f27a1021b76d95b6604646c

  • /data/data/com.ibl.apk/files/txtscreensize.txt

    Filesize

    11B

    MD5

    1b65c10c6215685f9d621d797f911373

    SHA1

    cc50aaed5cd521a62ec8cf9fe0413153ec90f265

    SHA256

    2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89

    SHA512

    5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f