Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
18-11-2024 07:38
General
-
Target
cryptowise.online.apk
-
Size
16.2MB
-
MD5
8b56b11e6598e8e8e98b1da2460c760f
-
SHA1
ada37dbc381490967d24ba7d1125e0041d2d5796
-
SHA256
fcb4310699060b04e483e9f66fc7602b7298a23d05a4a25695ccc6052a27a7c1
-
SHA512
59c0a686604844106e9c25b701fbf684b04275ff774945f2b4f1b76ee557669a65bd5e9e06e3dd8c07defaba95ffa606291e9932ca2962baac7b057be3ae0fa1
-
SSDEEP
98304:FYGd9B5H4GeR6F4OGATzyYgW8qbVZjemQKHF3ukmzczBSTo0tRp6SF1:GGddHC9OGKevNqZMmQOF3uDz9Tv6g
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
com.cryptowise.online1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
37B
MD54cb1e413b4807170fcfb333a6ccd3430
SHA16000e6f770573a64bf4861701194015322ab4ea5
SHA2567be4011d6185e67aadf0cd6d67044cce76318c7b872f171290875fc5091c77ed
SHA512028eec0d7deebbd5453ac3ef99fe7a604f52573d14af01e04749e42a3c8d9a87ecccb5dccf5e8b7bf0be4a5e9f0273c913fdbe9198ba97abd8e307e4774dc2bd