Analysis

  • max time kernel
    57s
  • max time network
    153s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    11-11-2024 22:04

General

  • Target

    0f7a00ee772048d53683ffe3df2162729e0215815cf985f3db8c8be77f5d8263.apk

  • Size

    1.1MB

  • MD5

    af83b12fa77db7e44c5c52fabe7612b7

  • SHA1

    ec77923b3c5685aa8833798683ec6a5f9bdefed3

  • SHA256

    0f7a00ee772048d53683ffe3df2162729e0215815cf985f3db8c8be77f5d8263

  • SHA512

    7b02469824121c020ca06bc450761ada182b6b179119a9c169a2c9bff96aa7f3310259d3bd7e514f4e43d7069f5f0c9c7fecc90d2d2b8f75151dd7534c9f189c

  • SSDEEP

    24576:YSK5oDrTkUHCKpYdV4FvVimH0OLAMztj/GpojYVJg/MLFMo:YSK5olY4pVimHQMzCpVJg/Ho

Malware Config

Extracted

Family

hook

AES_key

Signatures

Processes

  • com.kizapatovema.comeda
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4633

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    4036d1ddee48dcffea2934659eabe810

    SHA1

    b8a464a8aac50febc37ff8e318bd36262a0c947b

    SHA256

    e23e1e169c49c4b7d173a7b929e77772728c1824c98e7eb4b39ece01f9ce6da3

    SHA512

    b37ccd1d347e90b415fba03728da0f7e0fc7c1fb412cc9fd22140600f38f1d4720d96b0840cbf7f2912d2d39f11de7db4a1aedb2c2a8b1f62463d85b3b9e45f8

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    7b81c1f089f2e027eb0a1857a605afea

    SHA1

    355d5e80c6a1969e3b09cce2ad923dacd44fd170

    SHA256

    d2a9a3df0207b9b6325295bb0746c90d504dbdbfdc0c1168f58d26cfe757c5ea

    SHA512

    b81bd1bd97c3ce7467384a4e3570b8adf3df9cffe42d3869c77693e1c12a32588b035098559a218ccd5c445f5803bb584610a8ebc6dda03b3b7718cb4356f11c

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    650840fcd3471b3837ca22be5debe58f

    SHA1

    662c4837e346d4866d7b10d3cc7b9cc8679aed9f

    SHA256

    2f9cf2d5fa66173947a9c33215831b32e2252ff55668aed44ed615c1d7d7d54f

    SHA512

    e5f2692c2e62d6bc4b23e0bfda034414766584e254534292b07cbed5f88dfcb6b5bbce1b8344ebc954132346680c12bee3dfe16aba17f469daec9036dfcd6d60

  • /data/user/0/com.kizapatovema.comeda/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    3b205fd3f63691fdea089ee6083d7f6b

    SHA1

    548225c72534381a4e3ce2c1276071f201fceb60

    SHA256

    28df293cea4457371ead7187ddbaeaf4e7cec1a05df1928c57828e5c899a75c3

    SHA512

    0bb6f1b68c1a97fd541fefa09e8e17afe2681002ccd170d5349bd9cbc7f954b855fe931ac0d2e8a90c95c089e5a22963c14ab67a4181f1893b4f4c8b4e69d30c