Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
01/10/2024, 12:57
General
-
Target
MiCaixa.apk
-
Size
4.4MB
-
MD5
5938aa8157e524405f3c7c6fff5283b1
-
SHA1
d65f5075de92e0daaab96043a0cd3e367edec77e
-
SHA256
fd20ec0d4e54a7511378b20042e3817c965ef392293f5f9d5015b5eb9d066b6f
-
SHA512
afe035ccc5c0c1924a920626feed13a23ef15358443f88fed011511b795e6eb9b207a7b0551bcf509d7c8f566d5e4e887e7ce78cf55e888eadaadd9e53bf68e5
-
SSDEEP
98304:Em+l4gWPGnf86kYWU00wD0eFD0pD0AD0EHD0nATD03D00D0gDJ:b+ZPnU6kYTNwDXDUDhDZDCqDCDhD/DJ
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 49 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appmicaixaappapk.app1⤵
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1Discovery
Software Discovery
1Security Software Discovery
1System Information Discovery
2System Network Configuration Discovery
1System Network Connections Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
427B
MD55777feec34bba2df6f74984c66f84e93
SHA1a12385c92b7c19201998249bb327394b6845e59b
SHA256870c0dc415973cf2639e8b0613769002b2c52092e672836d31a2dd134c7b6bfd
SHA512e186c7c0f75b60840199ef8de53e4991997c542450c05e61530a749583066a0bd660fc5bea69bb5c1bf25a8961dd684139c6c1c115ea9c93f0a1ff114990a063
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
44KB
MD5d5d190e1180c5e6858c40a93f7526f12
SHA10d054f2e34776c8d5bcfd54d743831b9919618fe
SHA256274fe3e82fc2630d99809afd6a1c64768a77ed69c04b33e0df6a292a5a042203
SHA5120d58df37359d6e35f02ef95e4edcfb05fac6c3bc57d1c3e56e49fa7b6c66aef3f99b383cb14dc5a01b52bc6a0d4685f275fb30279aa26e8339a5e0b8416ba85e
-
Filesize
7KB
MD5c1856fe66350f0e32bb443fe0e8b2060
SHA17c0d497ff5fa85fe3bf22f3ee2640cb6d97a0ba1
SHA256240a94549a5d7661093b0092a7c298870ecc868d45e1e257820f07084e4f2a3e
SHA5127150ec10595e04f9875c0c80707efcc03eb9e06163d588486bc5579d9e40d8446bf78790ee9de934ee1bb0a5b1e7568c72ba12cd6f3998f88344b9ebcad4e5fa
-
Filesize
11B
MD51b65c10c6215685f9d621d797f911373
SHA1cc50aaed5cd521a62ec8cf9fe0413153ec90f265
SHA2562230c2b2787663a054c47450ecd1718f0296853ad768b8e5d306ecb912685e89
SHA5125a9139f295dbe384b1584eff5c11f3f86759232f7b661b75f27fe92b996b4cdc0552e315f79b26f5f2c1f91756d9ae04cf0c3675b6172e91a3d373b9b314496f
