Analysis
-
max time kernel
149s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
11/10/2024, 09:02
Behavioral task
behavioral1
Sample
Test.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Test.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Test.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
Test.apk
-
Size
4.7MB
-
MD5
7eea58428074b4503146c1826e66a422
-
SHA1
a95d0817d0bbdeaa0c8bf35d7842eecc59fcbe79
-
SHA256
9e601fed8c98a61646197897e94a9f6e720f7ca5c0df4a84cef3dd0eda1addca
-
SHA512
9e6db643f15f0e416e83ec21aff88767d99554cb70c7dbbd40810f630dc1cb682bdc840f9b111ce439582b1e4f3f5f8ecec80193906f296c12059107aaf40b33
-
SSDEEP
98304:4UxSjJ30z7P5uk3/fvGelPKjuM1v4xmzqgzBtTV0taampL:4UxmJ30Hp3/fuelCaMl40zqyqH8
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId build.ledear.lfsmf -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock build.ledear.lfsmf -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver build.ledear.lfsmf -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule build.ledear.lfsmf
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33B
MD5365f074d64faad2f0f0c7784608e5b57
SHA12105b80d01621cbd370bec93f73709a7b67d565b
SHA2560c4662ed55fc03738e7903864ed0249c921b8f2d858531577eebd53501237cc4
SHA512d29b5c16d10a78b386ba1f4882f7e80bc6d41887671abe6a36c746b015ea280d4a26f3d2af323b4ad755c256e5851a5b95d0bda8882c6c0a2c125bc748fab47a
-
Filesize
21B
MD5397405ec11a4ea2c73d7830a8a57971d
SHA1075734bf78c4bcc7816c023609b9239fccb633d6
SHA256f75524630758fbc8ad900293e800daa77d2c3c70ab2a322a497c2fe9d82a8222
SHA5128c1dc72c0f8ca30779e9bbd67a76fc7efad5e8f4947fc81c50ae9051d466e465968be807070268442b72e697bdafd2a1bcca9588142a9421120156666b205cb8
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
25B
MD5bdb821a955117250611e94cd23842584
SHA181edcea1b44f94cfc140710c8410d0696b760c67
SHA256076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
SHA512e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268