Analysis
-
max time kernel
149s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
22-10-2024 13:42
Behavioral task
behavioral1
Sample
836cf40fff80c3041094f3db4a4a296ccab4031ea80f0dbd7467de652c9842df.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
836cf40fff80c3041094f3db4a4a296ccab4031ea80f0dbd7467de652c9842df.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
836cf40fff80c3041094f3db4a4a296ccab4031ea80f0dbd7467de652c9842df.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
836cf40fff80c3041094f3db4a4a296ccab4031ea80f0dbd7467de652c9842df.apk
-
Size
4.4MB
-
MD5
a311af31612ad06c6fbfe028fb424f61
-
SHA1
30c438eecd0ba3362fcbd546e0ae93ea70b0231d
-
SHA256
836cf40fff80c3041094f3db4a4a296ccab4031ea80f0dbd7467de652c9842df
-
SHA512
40672973fe5739c2d25ffa7991185e74f4c73519a81f8a947daee801bda08772834a724131a330a5921c4898a61bb6b70aba2a61baec2771e828b98561f1e638
-
SSDEEP
98304:pbzB0Tcmz+mEOzIzRtHV9IWUSo0taB+UJzT56P0L3im:wLzuzRt19DNTa4ozTMkl
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId build.ledear.apk -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock build.ledear.apk -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver build.ledear.apk -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule build.ledear.apk
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
29B
MD5b855766e6bb8e321366f4604ef5447fb
SHA15c4aa7a56f57cd541d8cc2783a0f4f1cc455a030
SHA256bdebb51c775827e86023b695d61d051f02a046d7722946a8fc468e3b28594338
SHA512d275b72f4d42399633ce5901ed29796ba525a2886cb514dd8f55c34cebdb74b5310234ced60d65f99306464203ab994304775daa212210d3045e05eb90369c21
-
Filesize
25B
MD5bdb821a955117250611e94cd23842584
SHA181edcea1b44f94cfc140710c8410d0696b760c67
SHA256076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
SHA512e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268