Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    08/11/2024, 22:47

General

  • Target
    9ae6d9b2af4dfa5de6859c987fcd7fc95910135d503c0efac8e7efd31f869862.apk
  • Size 4.0MB
  • Sample241108-2q2s1straq
  • SHA256 9ae6d9b2af4dfa5de6859c987fcd7fc95910135d503c0efac8e7efd31f869862
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs

    Application may abuse the accessibility service to prevent their removal.

Processes

  • com.will.govern
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Performs UI accessibility actions on behalf of the user
    PID:4795

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        pt.json.cur.prof

        • Path /data/data/com.will.govern/app_alert/oat/pt.json.cur.prof
        • Size 4KB
        • SHA256 02138c58b4b825b4e3bf05f73f90a4d0d65270b3b2db0179bb64c2365637143b
        • MD5 SHA1 SHA512 SSDEEP

        pt.json

        • Path /data/data/com.will.govern/app_alert/pt.json
        • Size 1.8MB
        • SHA256 cdb583e4aa7cabc15e676e76865276a21973fde7f604df4d6f375ee9385c2ac9
        • MD5 SHA1 SHA512 SSDEEP

        pt.json

        • Path /data/data/com.will.govern/app_alert/pt.json
        • Size 1.8MB
        • SHA256 f9dcb0ff2157e9aedfbe865db025a575995e20e764642868f123d228b03a8b5e
        • MD5 SHA1 SHA512 SSDEEP

        pt.json

        • Path /data/user/0/com.will.govern/app_alert/pt.json
        • Size 4.8MB
        • SHA256 703dce273b76951339c3adfc7d01464f06ce05cd30b0f8f821e004e7a0ce794c
        • MD5 SHA1 SHA512 SSDEEP