Analysis
- max time kernel
8s - max time network
134s - platform
android_x86 - resource
android-x86-arm-20240624-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system - submitted
07/11/2024, 22:08
Behavioral task
behavioral1
Sample
8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.apk
Resource
android-x86-arm-20240624-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.apk
Resource
android-x64-20240910-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.apk
Resource
android-x64-arm64-20240910-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
final-signed.apk
Resource
android-x86-arm-20240624-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
final-signed.apk
Resource
android-33-x64-arm64-20240910-en
1 signatures
150 seconds
General
- Target 8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e.apk
- Size 2.9MB
- Sample241107-12nj4azaml
- SHA256 8de28a862aacf7566acbcea299c237180cf399c6dfaac5659642261181c57c1e
- MD5 5ebe0fc63cbabf06185a6062dd9453fb
- SHA1 b6fc5eb56e2e8a6132708a8d3475a686c7af8adb
- SHA512 36ab079710a10c93fc40dbeaf56e806fdb6b2ec6127e92c4fa8dd85b19e3d71e3181799b67e2dbb3b47c5f20d8fb4e7f400284c0576e917b6a5ac5ed66ce1cea
- SSDEEP 49152:5l2tdATYgKoTAp1fi/VuxgiAmJiE5XMFrGiQNA9+vTxFALN:5lRTBTw1GE5XMeNHvTER
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 13 IoCs
description ioc Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/citrus.leotard.subtitle.parsnip/cache/final-signed.apk
- Size 2.6MB
- SHA256 f43476fc30d1a35b442da198ed66be1dfa9287a0cb01dee79f3a7b33a6f221e8
- MD5 4043f234aee4c67f9a20e315ea9a3332
- SHA1 a3bb1f53978e0f37b17147fa7db57867e88f1159
- SHA512 6b49a58010d67089950d80434133d1428e34ac32d88448fa91b24802c959e0f41aec9b62e535d4adf871cf8cb7096399bb8dc9a10e3da9a0a1f2dd1713bf2bcf
- SSDEEP 49152:7gmmUnGnBs1OiimJwEZpOJrg0QrAx1Lb0XCu+YHU1gwCd:7HmUAEZpOUr+b0SunDd
- MD5 SHA1 SHA512 SSDEEP