Resubmissions
28/09/2026, 15:56
260928-tdk1qsyvfy1028/09/2026, 15:44
260928-s6pzqaytas1028/09/2026, 11:33
260928-nn7dtstwev1005/11/2024, 17:52
241105-wf7cvsvhqa1008/10/2024, 22:02
241008-1xzrka1ekq8Analysis
- max time kernel
7s - max time network
157s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
05/11/2024, 17:52
Behavioral task
behavioral1
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x86-arm-20240624-en
android-9-x86
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x64-20240624-en
android-10-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
final-signed.apk
Resource
android-x86-arm-20240910-en
android-9-x86
15 signatures
150 seconds
Behavioral task
behavioral5
Sample
final-signed.apk
Resource
android-x64-20240624-en
android-10-x64
14 signatures
150 seconds
General
- Target ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
- Size 2.7MB
- Sample241105-wf7cvsvhqa
- SHA256 ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0
- MD5 fb7c0a53b327485ed0602d2f10710489
- SHA1 e9589c6854f2044cc4c7974a089fc47dfe88cded
- SHA512 e63b1c6b8869d3c5f6fd705d4b27e1b09db7a60283cb88b6fe9dda73652a6be5ea79a530fd09c809aaa96c97799d0aa0b2e1554c1715216785ed0f14e1c3f304
- SSDEEP 49152:1y1VhcgKEKiOSNbor+26JFC6xBq5EfdaVMFyeO9p3ufIoOZX:1+zxKVSqqzJQ4/1aVgyVp3X
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 28 IoCs
description ioc Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 2.4MB
- SHA256 136d00629e8cd59a6be639b0eaef925fd8cd68cbcbdb71a3a407836c560b8579
- MD5 eb0ad0b462c65a40c16d43c15cd06aea
- SHA1 28b0a4559078eac3bd1c06b493c35408e3def804
- SHA512 d5178c83b493999e380b68abc6511ace9c3296393f08bee01dd80582a752fa07a2658bd1d2d0ef3fed01cca9ef17b31c5e5e0c4986ea46ce91a19c9c10e42b58
- SSDEEP 49152:oRkr6w6JVKUf5wj0FRaVeRyWogZqChiBx1gwxm:V2dJIg7PaV8yvgZnhWm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 1.0MB
- SHA256 adb12157f5f403ac603411ed4918d38d4081c43585346be653711f8f61bdc6b0
- MD5 7610c18d09bcfea22c0b06f4b87a7df2
- SHA1 083ecb95edbf78e7228e959e2203470053dc8083
- SHA512 e5bd6751e79f3d6f4a82ce5e5fcfff71d38345e77dfb1c11aad2d08b7a4e9da35bc26fb98bb61a1d47c58dadbfaf5fbcedc383d0de218b46664281622fe70d79
- SSDEEP 12288:keq0rCbGcBo4+ffCXxuUDiGPK/rsrTTkKtgbnVaW/2K0XJnwKVir:k2dc2qwR/ryTJ5GV0XJV6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 2.4MB
- SHA256 801754248c2fdee9eb3bc419ed121ea94879c474f3619ac5de5bd58ea138b819
- MD5 27b04839e20fd396148a23b31b1d9eca
- SHA1 c4c238b6c08a108f16f2b66b23fb8d938c0f25cc
- SHA512 0729818b445262a2cf1226507c2535d90d80879af3820bc318fb12056f1dba8194c7c978a906bc21f8b7f00adaacceea0c4336f81086760fc2649a8ab7dce4f2
- SSDEEP 24576:LNUr/mtsB5Wbzj0Ji2Ru1VqDRyrCaNdiZqCJvvK2onEw54gy4gwx5tTcpx:JUf5wj0FRaVeRyWogZqChiBx1gwxm
- MD5 SHA1 SHA512 SSDEEP