Resubmissions

20/08/2024, 14:07

240820-re1rgazcjl10

29/07/2024, 14:41

240729-r2l7lashqr

29/07/2024, 14:34

240729-rxelyssfpk10

Analysis

  • max time kernel
    14s
  • max time network
    183s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    29/07/2024, 14:34

General

  • Target
    e769ef0d011cbf3322c9e85d4cdf70af413f021d033aed884c1431f2b7861d0d.apk
  • Size 5.6MB
  • Sample240729-rxelyssfpk
  • SHA256 e769ef0d011cbf3322c9e85d4cdf70af413f021d033aed884c1431f2b7861d0d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • com.necapp.lpp4201
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    PID:4244

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        localdb.db

        • Path /data/data/com.necapp.lpp4201/files/localdb.db
        • Size 12KB
        • SHA256 409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f
        • MD5 SHA1 SHA512 SSDEEP

        localdb.db

        • Path /data/data/com.necapp.lpp4201/files/localdb.db
        • Size 4KB
        • SHA256 84c1c2e80fe7a0a5ce0c6493bd1100d1f5c032b18571ef8344b836f5b1fa580c
        • MD5 SHA1 SHA512

        localdb.db-journal

        • Path /data/data/com.necapp.lpp4201/files/localdb.db-journal
        • Size 4KB
        • SHA256 87f2465c65d6fe53bcc3ffcd5d6ef28b7fadbaf9df52a323d7355932d0db4b90
        • MD5 SHA1 SHA512 SSDEEP

        localdb.db-shm

        • Path /data/data/com.necapp.lpp4201/files/localdb.db-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP