Analysis

  • max time kernel
    13s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    24-03-2024 22:00

General

  • Target

    4daf21a708afc06c0da4ee6e192a6db6405efb1e3a9eb6905cc69d501e781c8b.apk

  • Size

    4.5MB

  • MD5

    1ec0f8696578e0e427140fd256ec4e4f

  • SHA1

    dee29fb458a62b82e63a8f1cc570b4b2136faa1c

  • SHA256

    4daf21a708afc06c0da4ee6e192a6db6405efb1e3a9eb6905cc69d501e781c8b

  • SHA512

    5d8c4b1c6190af462101145713b8f53317a63c94fe737d413e758b3c3f404b2ffeba18aaa988cf2e8cfbc6304b8e6e0d51fe3f57f82e165dda83e5b0260b61f9

  • SSDEEP

    98304:gLUhinlhin6Vhinahinx1hin6hinshinUhindbB1N9XruuBogd9PRlO:gLKCzC6DC8CxjCcCyCKCdbnnXquh9PRs

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Acquires the wake lock 1 IoCs

Processes

  • com.bbvacodicoappnuevaapppapk.apk
    1⤵
    • Makes use of the framework's Accessibility service
    • Makes use of the framework's foreground persistence service
    • Acquires the wake lock
    PID:5060

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.bbvacodicoappnuevaapppapk.apk/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/com.bbvacodicoappnuevaapppapk.apk/files/db.db

    Filesize

    40KB

    MD5

    0f846d61a922fcd3852c7241f99dc9bc

    SHA1

    2198433f3a500dcf88048096d0dbdb9f26b7ce47

    SHA256

    39ced8a590d3e71780b7d787db9b98065d9cd7a9f987dda085fb837a012cff8d

    SHA512

    d2380af9ad7c68ffdca1745f6dc3f747cc5ff5622ad1c6a1b1af79267c8d3d1f28fe6e01c435797a77309ec31ce085a3c6866503b01bc9850f679ffb34ea3c08

  • /data/data/com.bbvacodicoappnuevaapppapk.apk/files/loading.gif

    Filesize

    64KB

    MD5

    38a092b913ebddbbf06bb8353ee6fe47

    SHA1

    3df345f5800432adbfec36ec6dc312ff0fc58893

    SHA256

    db486432f1f42ea1d20f63027cbf9cf71e137b64cdf38875e982beee47d94cad

    SHA512

    a8372477243c827b5ae576606f0281a74771b06a6aa090d12b3480561debb1fe2af2f1e607401d8d9a99cf17316f2d8712045db3ef38863b41672c9547ed31e4

  • /data/data/com.bbvacodicoappnuevaapppapk.apk/files/txtscreensize.txt

    Filesize

    11B

    MD5

    1b65c10c6215685f9d621d797f911373

    SHA1

    cc50aaed5cd521a62ec8cf9fe0413153ec90f265

    SHA256

    2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89

    SHA512

    5a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f