Analysis
-
max time kernel
166s -
max time network
172s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
-
submitted
26-03-2024 18:40
General
-
Target
childapp.apk
-
Size
3.7MB
-
MD5
7a49bb6c08b7c390a73cf49e139037fd
-
SHA1
c290545a14118537a1136ed1ca63daa37e19cafa
-
SHA256
641c2ec268b01a91c57d84ebe1a9c9fafb24a258406ea6bf6d542d1b4c5296c7
-
SHA512
95905b1e8d92c2f45e14e9b8d6871a74d6d0d010d60cdf641ddfa6f62f45a2089ab19c24824876a230ed53a223d160647ee959615455181721f41c9908121954
-
SSDEEP
98304:zZOevPO5GOCsmqyF77KmznzB+Ty0t8sL6z:zPvxNsmqAlz4xy
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
listing.material.pensions1⤵
- Makes use of the framework's Accessibility service
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
- Requests enabling of the accessibility settings.
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33B
MD58cdcd9f39a5d810b08a538b19a72cbd9
SHA1b0567c6a07da5b51214e63c6e212e986d0a4762b
SHA256d989029a0c83049ed3a02b564faca1df7cffa947667b3c2f9cce681cd8147b8c
SHA512f182af48309f15aeedb4cebac41e2c8217e99270ee027fc079cd01dd6077a4b94bd1d960a392f327f997e3822c8de9c5d3e81d73cb45e5f0c030dbff59a718a4
-
Filesize
25B
MD5ba30336bf53d54ed3c0ea69dd545de8c
SHA1ce99c6724c75b93b7448e2d9fac16ca702a5711f
SHA2562d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af
SHA512eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e
-
Filesize
288B
MD59510a1f00380b394b4abfc231cdf533c
SHA102eb631b1c0437d2afa164a3420aea941de8db6e
SHA256ec87cd51f36c0388c702b992ee9160bfdaaf64e65f2b30d12a8912566dae2216
SHA512867ba23ba01a182d7892a7fdea956cc385c6b7369627cdf44421309ee81479097dbe8a3061c5a0c4c5d80829423959114afd198d0f6222ca72e8d7a9b29cadaa
-
Filesize
29B
MD5b9b530e2448252311640bbecb69b796a
SHA1215ede46fb42a68a7ae84c3019acb3019668a46c
SHA2565a290151305de1ec4f790cd8ada8bd68c076a2c4ed497c40a519509659b65150
SHA5125834499307946d130887067b2f837ddfef7fdfe3a7e5ed8977eb14c2dc1ab328334da35ed4c978e20b3e6b28ff30dbd12f0430f4b7c831481f339d360c260919