Analysis
-
max time kernel
66s -
max time network
75s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
05-11-2024 16:51
General
-
Target
VPN Service Pro .apk
-
Size
9.4MB
-
MD5
2ae3b1faf664cb347b8d81dfcddea167
-
SHA1
acdaa4d3b3ae29442567e46baaee7b3932d000d0
-
SHA256
d492cf0729e9e846be934ba081dec52c6136141e31dc50a533731f62522d1f9a
-
SHA512
f0a6e2a561ba0f56a27a1e09a5a768d929f08f07bee2269f2be4bfac90095c28c6a631edf58df5422f1acd4a55f55bf41bdd2b95cda5fa3a35ab345d5bb9e6f0
-
SSDEEP
98304:3l/tPUSu0e0livUDtcX+VCvwx49G0PGucKMIAmzRzBHT40tlSCAB:3DsP0rlivUDtVYIx41YFI/zfjS
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
european.tubes.agreement1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
33B
MD5bcda3ea991660c7e05d39a1e0ed3beb6
SHA1024450a5e41e4e4e7ab1678a1fa2fdd1b41d4f65
SHA256403c898ed4d2df3c2eadea3b24d657d3aa53316a85873f55b349066ac3860153
SHA512d85e96987e190cc4ff851c29548f4484af444104da6ecf68160a561227beeb1f7343679b677b513d4a8fd85b2f3b96e265a239d8ff5793686e533dd8c7c64f17
-
Filesize
138B
MD5b1a2d7543616b6b5b7f4b33485273c0b
SHA1b070b6e862be837c96ab4efd162ee9ca32ad14cd
SHA256e35b61a77b5a582676646c7dde9a2bfeb752ff73a4af250dc1c181dc542765c6
SHA512dc60a807c944a3e5ac6f095009200c511caa742400280aae29fc0749adcf0551b2252f90e46f20b80c1368f65a2f6fea91d0307c641eefff8f9ec9eee434f64e