Analysis
-
max time kernel
59s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
09-11-2024 12:01
General
-
Target
ready.apk
-
Size
9.4MB
-
MD5
a1702a20cc31e787f0b0aca4ff865f6b
-
SHA1
1a839c5e42e035525e912b8c74168dfa8cf7f72a
-
SHA256
1dcf0f059a6d7cf1c41aae4272248b6315a086b3190a5ca4d002842c1f12ab9d
-
SHA512
601a5bf15642e875cc085b2d5b645d8087de62b5da04d5c67fb4b5539bd3116195fa3592d426fc547bfb802a187a797d46a3d0a0f9c0f498ba4d940b4787893b
-
SSDEEP
98304:6PadBaQ+Fj5HYjRdpYFzffru0ooJeGvqmz/zB/TE0tAQavsbM:V8JFj5H4Azi0ooJ7vFzV3B5bM
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
consideration.documented.indians1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
29B
MD5beeee0c05632c572484e90ff57994a29
SHA11ca5c1dc3b318b56162aa2eb49d43dd4cf2ae841
SHA256a0962c700a11a232386ceac135e0343d6aca311ff0cceb75556e0c45fb8fc527
SHA512caed1d80812a0eb2ec34e117d0424eabb4d2128fa58d5c77dda5fc25458a47cf43719d98a36d1f5007b22bc546a76f1531de4006d0e49807d697b43d0e4fefdc
-
Filesize
37B
MD5c1c157b8fa46f9cb68f88076d7b7614e
SHA115fe430b152b2411a6b36e9a6e9da64badf6a7c1
SHA256c42282ffcc44fb3cf3572a97151979f886f17fe85402a0ba7df3ba2c3f529815
SHA512ae80cf88cd90d54f36d2ca33b216820a9079c6637362c85d985de0ee21e5390b07933484f6b0cb34a838911ee27316e5f652b64cb17b131754efa79ee5b03d2d
-
Filesize
207B
MD5960582e4e5821b2449ea51c841c5085d
SHA1d80b508f7e22f01e2ff43a5bdd93fb00b2155637
SHA2561dee423381d573cf2bccdc4887e94f64e6fe6d921082fcb512bff9c5fa92f24d
SHA512caadff84f0befb8a7a0fd4170d2e7cdea3b507cb1863a493ce82c20e415982a65ecad55ab5053d05c3a947e787168fd2705a8bb83eca9175b94e569964241387