Analysis
-
max time kernel
22s -
max time network
23s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
21-11-2024 10:13
General
-
Target
86c950b39eb45284d8575c8309457b71740ae6493af38b9e218bb06d545048be.apk
-
Size
5.4MB
-
MD5
6aa02083742655c4e4d47393b7948c78
-
SHA1
3e7b22752724a2bb11e1405f47e9f9381dab2b53
-
SHA256
86c950b39eb45284d8575c8309457b71740ae6493af38b9e218bb06d545048be
-
SHA512
31772ca765ee2ef27146e0ebdd97fb107d6b0589e9e8b14409663c244d0f22a23439848bc6579203e35305a6b69addae532b27250e9e6bb80818fd25ee78db0e
-
SSDEEP
98304:iizB6Timz24s0tJ7Homcrr5/V2LQtyaLLWH7RTozw71CsUo3MlCK7w7:GNz2Yymcrr5N2GyCqCwhCsUoOe
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.editorial.field1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
33B
MD5b135adc7a4959b175993c2feec6db0ba
SHA18574faabb484226eda243632ca701317834bf817
SHA25637fa3fb8ee89031fcbf90868b3416926cee61e695c8a3caeee044a57fb78d1d4
SHA512d6e057e347cb082cb24fdd7df69bff17c06c247ccfd17c75d923536dc110f04bf11f9f9255d867a7e5640a6177c77f7a5c379793963b55fc865eb2fda0b56161
-
Filesize
25B
MD5925142b73595bfe46c7da6694d700c4b
SHA16234501806a051833e5a2e4f28f9785ca1442b3e
SHA25680708d62ab71c7303f5f27330ad70e4b5b301d4398bc36be18b10b70c35fe205
SHA512c48c5ad683a48d8a1f46097e2927a032b49cfc11cc2af04460f612a5c34a96aa5197fb935e4dcfe0d40fbe67e6c26bf3af9d0c811d0a7487e1cbfa02d27d3e69