Analysis
-
max time kernel
13s -
max time network
142s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
14-06-2024 00:19
General
-
Target
743f286bec4dd63632e259d9cdee2524cb5ab9aa0f7f1c8dbf5920b3bbaec9c8.apk
-
Size
3.3MB
-
MD5
b383f005fd0b5a7f69e7de2663c45143
-
SHA1
feb0863204c430619076d50f0a3ced651022f3df
-
SHA256
743f286bec4dd63632e259d9cdee2524cb5ab9aa0f7f1c8dbf5920b3bbaec9c8
-
SHA512
34a069c2c507822f6f32277f82a6210f5d785170a2e63a30bce062a8c37be5f6b4866facad0524bcca0ad4a8c4291af20a88a89e5749487c08f0215887841a08
-
SSDEEP
49152:d0hHEVujZlsvDNRU2UlMbecBIe+XCH/KOksG+Cv851MTv7FPg8vzfrhGZ:di3oRUsIeKCHfn8voOHzfrhGZ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.perl.gqm1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.perl.gqm/app_outdex/libdexprotector.4208.soFilesize
369KB
MD5bd1dac8c669ace7d84a4cf03833ce9e0
SHA16c7392d935c6a09041cc454f6bf3250edc5a38f8
SHA256c872753e1c55f46d70aca95870fb1629ef52471ddf588b9153ea1d76c99349b9
SHA5128e397760bb1e923510b7666ae081cba8734080af796cc4695e9bb4d6517c388c8d220547c10e96ae8eacb78a46017e808c38ac8456645d4363bf6e6c56021d53
-
Anonymous-DexFile@0xeadeb000-0xeadeb12cFilesize
300B
MD57c80da100acf95df2c9629e515898a6b
SHA128c7d9a00126bc12a0760f9cc6270abea6866d73
SHA256ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f
SHA512b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2