Analysis
-
max time kernel
119s -
max time network
118s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
30-10-2024 22:18
General
-
Target
Porn Hub Premium.apk
-
Size
5.5MB
-
MD5
ca5829c89ba101b447f7c99b0fea784b
-
SHA1
c57968863f8a882d18554d613d0afa29c52e5123
-
SHA256
bf1de121cca70ee568a3c446049bbb547f09273579c58b0c30ec837d06f8209b
-
SHA512
a7eafeb082b74888f24d29906a2cd20a7c8c82738b1e846738b4cb3e533e0afafcc01216c1e9f1d6e82908dac4d34eaf35f1aecee75aff2ddf514b87a74f51c2
-
SSDEEP
98304:a4KNbkyi02grv5x7+SKT8hrhpxwmzhzBaTa0tGvbB:KN7i0rlYTAFpxPzG56
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
infrastructure.identical.jets1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Requests enabling of the accessibility settings.
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37B
MD52ea244fb08570cc2633fc56bdd7b4f58
SHA1e62264711e4caaaf99917c63807ea9d38a72a032
SHA2565172f058d6000b0b18c2474b4c83357b5de845534ea0a92f4a850e9e3bca0a05
SHA512975f1430c8f02ccb04e64e590832acfe80b38344743d0c59d767189daf2d489db22a565b9cfbf04a2da553907833743876dea729e1f74ddfd484429b01ed57d9
-
Filesize
33B
MD5aca45ee735f07aad59605f94de02544b
SHA16feee8f180a641b098d489d3b9977c2e20287f02
SHA25665d64450b76fb509a871e082a1edf14dbe4715ea0853c690c566c193a653e593
SHA5125294f4b0850572838f86ef7adfb479a912464a705407c18662ba0fe6a8fc2bea06fe77127c5e2fdc416d272980802b8ea3b6ad15f392d8de25f6776da7c2055f
-
Filesize
25B
MD5ba30336bf53d54ed3c0ea69dd545de8c
SHA1ce99c6724c75b93b7448e2d9fac16ca702a5711f
SHA2562d6988fb5afdaafc4e33fa1f71d6f10c95ab5a49a8ec820add5b13eef05439af
SHA512eea34ca526e03349e746d3687ea660b4748f0174fe2ffdb65161e232e08630b345e03329614852ce881a71362ba68575e9dd08fa361a416e5b2fb231e21a0a3e
-
Filesize
288B
MD5e1339bcdbd8bc2072340599119f35ca2
SHA160b0a577d437c363d2b5878589318e9a1b9a0cad
SHA25646d7e699676bfc5f6215a07b16e14acabd3428b0eb3e4467cb360da73abb7f3a
SHA5128f28ca797502999fd3440ae375452c6145380fa0e71aba379bca6c349d32a016fc2f9cf75c5acf173626a6863dd399076c6852f672dcaed71bb0b7582d5d5f5d