Analysis
-
max time kernel
12s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
-
submitted
14-06-2024 00:41
General
-
Target
12341f38f24cb7f52bd014fc862de8fa0c25ffcbbec4dfb766f02a2d51a23276.apk
-
Size
3.5MB
-
MD5
acb30cb23351ace7538092596d750f96
-
SHA1
7f349be4745ad452e22b214b9c6809af589e9e13
-
SHA256
12341f38f24cb7f52bd014fc862de8fa0c25ffcbbec4dfb766f02a2d51a23276
-
SHA512
bf038048a7e2bff06b3cf20c919c41575589c3738ec43ddb6beb0154b94556b01f33b7a435e65e87a63440ee6c9140e753470fe5aa8f7f0a5eaf409449730184
-
SSDEEP
98304:hKYnHnxpmmN1a8TsRIZgodxo89hAd9Dzfrbb4z:QkpmmN11jDn9h+u
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.perl.gqm1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.perl.gqm/app_outdex/libdexprotector.5009.soFilesize
370KB
MD5eb0ffaa1df8d10a5894023075ab54eaa
SHA1d3bc97953ba2fa60a4e3f5bdde7e0583a290d9dd
SHA256790c7269074ec068e053d077ecf3c5c7a596e154e16cf8650bc0ef88803dbf06
SHA512d782d15ae4d15445fbbfca07a66240695022f46af60c4ad6c9e0a979b618259769068adbe53df330ebdb727c31ddc7e68ab26943d4952e3769aa1a738d03c88b
-
/data/user/0/com.perl.gqm/[email protected]Filesize
300B
MD57c80da100acf95df2c9629e515898a6b
SHA128c7d9a00126bc12a0760f9cc6270abea6866d73
SHA256ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f
SHA512b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2