Analysis
-
max time kernel
179s -
max time network
189s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
15-05-2024 00:58
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20240514-en
General
-
Target
ready.apk
-
Size
9.3MB
-
MD5
34a249b472c0800abf433415493c6e53
-
SHA1
e338856960d52b0164781fee6b929266c3b31682
-
SHA256
176e290d646d15a92cb5c1b1b7379cfea6342c392f2f71d8baa65098b5af91f2
-
SHA512
f2ab9be96dd092abe66ccbe884d5f9e48e4053cd522359352b0a77cc5b65e023bea8dd6eebba28beeb22261396205594f665bda084bf1601c6328af960156728
-
SSDEEP
98304:YOYP+Uvy+DadnhmIn+IfbqBKUr6emz8zBpTz0t8ejL:W2UvZDQhn+ge65z08l
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
mario.resulting.eyesdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground mario.resulting.eyes -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
mario.resulting.eyesdescription ioc process Framework service call android.app.IActivityManager.registerReceiver mario.resulting.eyes -
Acquires the wake lock 1 IoCs
Processes:
mario.resulting.eyesdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock mario.resulting.eyes
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Config/sys/apps/log/log-2024-05-15.txtFilesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
/storage/emulated/0/Config/sys/apps/log/log-2024-05-15.txtFilesize
207B
MD53d1352eca0b27632d7b9e3e02d36308f
SHA1cd2613d2747577a34603331fd38712dae00fadce
SHA2563ff0bd8a6b42c2b361a78acf048655301cfa20e304d0d11739935cda46bf4c0b
SHA51213b0faec81d9fcf651f1d25bf0a8c77c03e021dcaa822a894f1fc97874e6cc3b966988bce01479709ce3a37f743af2959d3065c48303fa43d38999893ef87c60