Analysis

  • max time kernel
    12s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    12-06-2024 13:52

General

  • Target

    61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk

  • Size

    2.2MB

  • MD5

    0e41cc88ddb58e054719cb24cda889a3

  • SHA1

    9c52fb47e349d05191c7bff8324d977151564f04

  • SHA256

    61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3

  • SHA512

    b9457ab79fe1017c91d39bff425895d7dcad95c2347e9e084758878eff0baef9b438718be460c16e5266dab27d05daa0a12877892565a9f61664a5332a111cd3

  • SSDEEP

    49152:a6bXXlu1BWV9RWl30J1NutbDS78LMaq5Skg8MzfrypB6A:V7ECvWlkrN+bDhLFWqzfryp4A

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

Processes

  • com.perl.gql
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    PID:4489

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /system_ext/framework/androidx.window.sidecar.jar
    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b