Resubmissions

29/03/2024, 09:48

240329-ls6a8aec3v10

26/03/2024, 11:06

240326-m7deesgg2310

Analysis

  • max time kernel
    147s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    29/03/2024, 09:48

General

  • Target
    731a58248c7b467bc9d9a7482d8cb010242b3a534904ddc39471fa0620752d22.apk
  • Size 4.5MB
  • Sample240329-ls6a8aec3v
  • SHA256 731a58248c7b467bc9d9a7482d8cb010242b3a534904ddc39471fa0620752d22
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 2 TTPs 2 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Acquires the wake lock 1 IoCs

Processes

  • com.apicolosi.newpro
    1⤵
    • Makes use of the framework's Accessibility service
    • Makes use of the framework's foreground persistence service
    • Acquires the wake lock
    PID:4617

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1

        • Path /data/user/0/com.apicolosi.newpro/cache/1
        • Size 311B
        • SHA256 e666049caaabf41dd239f8455cca9cd2e555b4ec0978a894dfe7bf71ff2e7d15
        • MD5 SHA1 SHA512

        ~test.test

        • Path /data/user/0/com.apicolosi.newpro/cache/~test.test
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        db.db

        • Path /data/user/0/com.apicolosi.newpro/files/db.db
        • Size 44KB
        • SHA256 274fe3e82fc2630d99809afd6a1c64768a77ed69c04b33e0df6a292a5a042203
        • MD5 SHA1 SHA512 SSDEEP

        loading.gif

        • Path /data/user/0/com.apicolosi.newpro/files/loading.gif
        • Size 121KB
        • SHA256 2013f490d45638cada331b3474ed65b9a43cec60da773accc98332e58c06336d
        • MD5 SHA1 SHA512 SSDEEP

        txtscreensize.txt

        • Path /data/user/0/com.apicolosi.newpro/files/txtscreensize.txt
        • Size 11B
        • SHA256 2230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89
        • MD5 SHA1 SHA512