Analysis
-
max time kernel
149s -
max time network
156s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
18-11-2024 07:38
General
-
Target
cryptowise.online.apk
-
Size
16.2MB
-
MD5
8b56b11e6598e8e8e98b1da2460c760f
-
SHA1
ada37dbc381490967d24ba7d1125e0041d2d5796
-
SHA256
fcb4310699060b04e483e9f66fc7602b7298a23d05a4a25695ccc6052a27a7c1
-
SHA512
59c0a686604844106e9c25b701fbf684b04275ff774945f2b4f1b76ee557669a65bd5e9e06e3dd8c07defaba95ffa606291e9932ca2962baac7b057be3ae0fa1
-
SSDEEP
98304:FYGd9B5H4GeR6F4OGATzyYgW8qbVZjemQKHF3ukmzczBSTo0tRp6SF1:GGddHC9OGKevNqZMmQOF3uDz9Tv6g
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
com.cryptowise.online1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
37B
MD54cb1e413b4807170fcfb333a6ccd3430
SHA16000e6f770573a64bf4861701194015322ab4ea5
SHA2567be4011d6185e67aadf0cd6d67044cce76318c7b872f171290875fc5091c77ed
SHA512028eec0d7deebbd5453ac3ef99fe7a604f52573d14af01e04749e42a3c8d9a87ecccb5dccf5e8b7bf0be4a5e9f0273c913fdbe9198ba97abd8e307e4774dc2bd
-
Filesize
29B
MD535029f704c2e9f54f09f7c4fcf958b6e
SHA1aa90baf4fed34a19f1f4ddfc5b6a19283b1e350a
SHA256e2bf173eec817dae170486929e35843a356b13c3e95a16d1e95a50251b8b8747
SHA51288fd229b2531bccc0f60a11440d8c700b518076351183640a69e4eb9a2c534d40a4d8a5f60f1e7d0788b4836b6311c0e6f9087229dd398d0a1a91e2623dccfd7
-
Filesize
57B
MD5ca977f2fc7ebea2ff8337cce10db5915
SHA1bc4126a8cdac8567c5af6704f2b51508888d751e
SHA256fe88eda4f4ab7e289c7ba107e13f8dac754d75df73153b956284aafabd6fcfee
SHA5124672b7a14688ed069ffb414acf5eb31f4675a9a1bf3c0ea16e8fb708c57dc659b9885ce001d02f72cb3b249adaed68711f8730959f06eb8d11019a3d79aaad63