Analysis
-
max time kernel
149s -
max time network
154s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
09-11-2024 12:01
General
-
Target
ready.apk
-
Size
9.4MB
-
MD5
a1702a20cc31e787f0b0aca4ff865f6b
-
SHA1
1a839c5e42e035525e912b8c74168dfa8cf7f72a
-
SHA256
1dcf0f059a6d7cf1c41aae4272248b6315a086b3190a5ca4d002842c1f12ab9d
-
SHA512
601a5bf15642e875cc085b2d5b645d8087de62b5da04d5c67fb4b5539bd3116195fa3592d426fc547bfb802a187a797d46a3d0a0f9c0f498ba4d940b4787893b
-
SSDEEP
98304:6PadBaQ+Fj5HYjRdpYFzffru0ooJeGvqmz/zB/TE0tAQavsbM:V8JFj5H4Azi0ooJ7vFzV3B5bM
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
consideration.documented.indians1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
41B
MD59b34035f49b41c6570eabd93938f6d9a
SHA1431432361dd3deaa06eb8a7031da2b489fbf8f0e
SHA2563eac71cedb99b42276a8c5efbe5f522b2db2f737c24cdafd0b8e233b66cd42cf
SHA5123a73d0aad4d7c07ebe8101042c66827664a39a24eb449c94d7564c12911f0bfd361c374abb20366f458b83969898509726df4c3c9be95f3914b48799957b6d1a
-
Filesize
29B
MD5beeee0c05632c572484e90ff57994a29
SHA11ca5c1dc3b318b56162aa2eb49d43dd4cf2ae841
SHA256a0962c700a11a232386ceac135e0343d6aca311ff0cceb75556e0c45fb8fc527
SHA512caed1d80812a0eb2ec34e117d0424eabb4d2128fa58d5c77dda5fc25458a47cf43719d98a36d1f5007b22bc546a76f1531de4006d0e49807d697b43d0e4fefdc