Analysis
-
max time kernel
129s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
-
submitted
13-06-2024 23:57
General
-
Target
d6a24896d2f88df880e5d5acc89bba51046e8d4e6f574b4fbbd319771de94bbd.apk
-
Size
3.3MB
-
MD5
712357dc4d693d3383857b3479377371
-
SHA1
5e76d90749e5053024632a7d5b44d231f9b5f692
-
SHA256
d6a24896d2f88df880e5d5acc89bba51046e8d4e6f574b4fbbd319771de94bbd
-
SHA512
c8aa49d43946d09284324202a6b92bb23fc60765e1f1af3bbe4829fe67bc222f433682b142328a0b7889077b2ee6b532d6c3454c98e41c88725f7986df837b50
-
SSDEEP
98304:+iGSefkYKL89o6HcDGXTKN+gDbLFzpzfrypkIC:/GS6ugXTq++xLIC
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.perl.gqm1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.perl.gqm/app_outdex/libdexprotector.5044.soFilesize
370KB
MD569afda89a7483f9b9aaa0f307a79b3dd
SHA1f1401815306b30c39f0276a627e53ca91a2579d3
SHA256a96a0918d573a562c1b5bc3bac88248311ba30553822026ba7535887efa1239c
SHA5122985e4e27c5182b6c0889688a517b08006798904ca8173e4008953ca67357812e3febd05cdd7fc3fd6b63cad1302be83b69055e9dce477384676e2991d570e6f
-
/data/user/0/com.perl.gqm/[email protected]Filesize
300B
MD57c80da100acf95df2c9629e515898a6b
SHA128c7d9a00126bc12a0760f9cc6270abea6866d73
SHA256ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f
SHA512b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2