Analysis
- max time kernel
132s - max time network
134s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
10/11/2024, 22:28
Static task
static1
Behavioral task
behavioral1
Sample
d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e.apk
Resource
android-x86-arm-20240624-en
General
- Target d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e.apk
- Size 2.8MB
- Sample241110-2d36bawmay
- SHA256 d8165712329fa120b5cc696514b5dd0d7043fbf7d6b6ef5f767348e0ba31aa6e
- MD5 87ccf62e07cf69c25a204bffdbc89630
- SHA1 e789b03b60ad99727ea65b52ce931482fb70814e
- SHA512 0dd9be08d2661ea9d1bae271d87543b91b04099387b6a0bb2e0948f4dfde7667a93c30add18a9e83cecb3117b368cdba9762e61c1b1292caf5aa450541df1dd8
- SSDEEP 49152:UgdDdnYeisFiaagZhmv5ZRkLWPNzh5K6WNQiLtrDMuwqxtX:fdYv6jaaov5ZRkLWPNh5K3QCt0DqzX
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.manubria.brahmanize Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.manubria.brahmanize - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.manubria.brahmanize - Performs UI accessibility actions on behalf of the user 1 TTPs 2 IoCs
Application may abuse the accessibility service to prevent their removal.
ioc Process android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.manubria.brahmanize android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.manubria.brahmanize - Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.manubria.brahmanize