Analysis
-
max time kernel
12s -
max time network
140s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
12-06-2024 13:52
Static task
static1
Behavioral task
behavioral1
Sample
61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk
-
Size
2.2MB
-
MD5
0e41cc88ddb58e054719cb24cda889a3
-
SHA1
9c52fb47e349d05191c7bff8324d977151564f04
-
SHA256
61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3
-
SHA512
b9457ab79fe1017c91d39bff425895d7dcad95c2347e9e084758878eff0baef9b438718be460c16e5266dab27d05daa0a12877892565a9f61664a5332a111cd3
-
SSDEEP
49152:a6bXXlu1BWV9RWl30J1NutbDS78LMaq5Skg8MzfrypB6A:V7ECvWlkrN+bDhLFWqzfryp4A
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.perl.gqlioc pid process /system_ext/framework/androidx.window.sidecar.jar 4489 com.perl.gql /system_ext/framework/androidx.window.sidecar.jar 4489 com.perl.gql -
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/system_ext/framework/androidx.window.sidecar.jarFilesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b