Resubmissions
28/09/2026, 15:56
260928-tdk1qsyvfy1028/09/2026, 15:44
260928-s6pzqaytas1028/09/2026, 11:33
260928-nn7dtstwev1005/11/2024, 17:52
241105-wf7cvsvhqa1008/10/2024, 22:02
241008-1xzrka1ekq8Analysis
- max time kernel
5s - max time network
157s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
05/11/2024, 17:52
Behavioral task
behavioral1
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x86-arm-20240624-en
android-9-x86
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x64-20240624-en
android-10-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
final-signed.apk
Resource
android-x86-arm-20240910-en
android-9-x86
15 signatures
150 seconds
Behavioral task
behavioral5
Sample
final-signed.apk
Resource
android-x64-20240624-en
android-10-x64
14 signatures
150 seconds
General
- Target ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0.apk
- Size 2.7MB
- Sample241105-wf7cvsvhqa
- SHA256 ee87b4c50e5573cba366efaa01b8719902b8bed8277f1903e764f9b4334778d0
- MD5 fb7c0a53b327485ed0602d2f10710489
- SHA1 e9589c6854f2044cc4c7974a089fc47dfe88cded
- SHA512 e63b1c6b8869d3c5f6fd705d4b27e1b09db7a60283cb88b6fe9dda73652a6be5ea79a530fd09c809aaa96c97799d0aa0b2e1554c1715216785ed0f14e1c3f304
- SSDEEP 49152:1y1VhcgKEKiOSNbor+26JFC6xBq5EfdaVMFyeO9p3ufIoOZX:1+zxKVSqqzJQ4/1aVgyVp3X
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 28 IoCs
description ioc Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 2.4MB
- SHA256 136d00629e8cd59a6be639b0eaef925fd8cd68cbcbdb71a3a407836c560b8579
- MD5 eb0ad0b462c65a40c16d43c15cd06aea
- SHA1 28b0a4559078eac3bd1c06b493c35408e3def804
- SHA512 d5178c83b493999e380b68abc6511ace9c3296393f08bee01dd80582a752fa07a2658bd1d2d0ef3fed01cca9ef17b31c5e5e0c4986ea46ce91a19c9c10e42b58
- SSDEEP 49152:oRkr6w6JVKUf5wj0FRaVeRyWogZqChiBx1gwxm:V2dJIg7PaV8yvgZnhWm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 678KB
- SHA256 bfd894c78f11b9de96dd89b53c89e9487bf7ec62b28b44a2a18686394d00302e
- MD5 ff893fa5414e624695f9281d3d3489f3
- SHA1 82eecb37cd8cba7469f18bc5aa66e87b6b2d59e5
- SHA512 0f921cd08abbc881664baa6041e772fafdc0b51e2cc019b749ed80305b3c71b46ac9999f3890c3865743cc5848a27a5a7b692b03db82c0291b17f5717c402434
- SSDEEP 6144:k+95pScWkyJ5zUCb3VAwxtlEaXmQOQod8nEpzPc/sqpa3JzPF3VyHnihbO8HcUk9:keq0rCbGcBo4+ffCXxuUD1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/banter.afterglow.unfrosted.mascot/cache/final-signed.apk
- Size 2.4MB
- SHA256 f7ab818f60c0e9f22114fb76130818d0e4d13120e838052721d2698d82c2b220
- MD5 499942a82aa835d9ea1859dc8b32c85c
- SHA1 5d16842492c415f92cd3306b668f85a6bb76648e
- SHA512 c0c3e81d980bf43a3f9f2f4584ab075432707ff12cada17f1be712e2bc9a8d28ab7fed62de4d0fc7d6e6e4545294a641b393a16d5eaa6a0dd561061e17112b64
- SSDEEP 49152:Mr6w6JVKUf5wj0FRaVeRyWogZqChiBx1gwxm:M2dJIg7PaV8yvgZnhWm
- MD5 SHA1 SHA512 SSDEEP