Analysis
-
max time kernel
149s -
max time network
149s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
23-11-2024 17:43
General
-
Target
ready.apk
-
Size
9.3MB
-
MD5
cce17d47d3b390211557eb867e2a351c
-
SHA1
a7809faaf47b033e804c0946351aeddf9c3881a7
-
SHA256
dbb8dd0c28595c9a8f61f48f9c032bbff65d9e9002d5e67dfeadd0e9d9e169cf
-
SHA512
8819c8a6f6e035051d359b9a779d16dbc107ce95d6020a24c1312e195032e1bb168f0670087be88618a6b5e760cb4eef09987b1afb881881faa625e5a49caaf2
-
SSDEEP
98304:75OiDrwAFsFcacKqs2YlpoSsPfy3+mzXzB1TJ0tANfHD:75OiDrwtcKLnpoSsn0ZzDmwD
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
prizes.medications.clients1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
21B
MD5656aa6c2bf935e573a2e5c628a244c19
SHA19756fb37d312a02ba4721e8a22c9be2c8c1c307c
SHA2566b888d5c2c21688f4510bc0b8cb25b464129123efa92808b9936fa5550d6541d
SHA5128e098e7d24b91499506cab82e2ea9da024b58d0795203e3a4e3b72f9ea7c2104971d48758b31e0d6cdaedf9f4d3f6ef8081ff873b93bfd4e8f164ba6f2051797
-
Filesize
29B
MD535029f704c2e9f54f09f7c4fcf958b6e
SHA1aa90baf4fed34a19f1f4ddfc5b6a19283b1e350a
SHA256e2bf173eec817dae170486929e35843a356b13c3e95a16d1e95a50251b8b8747
SHA51288fd229b2531bccc0f60a11440d8c700b518076351183640a69e4eb9a2c534d40a4d8a5f60f1e7d0788b4836b6311c0e6f9087229dd398d0a1a91e2623dccfd7
-
Filesize
57B
MD527517fe20268e244af2e1415ed58a902
SHA164cda5ef0f5ad4e0e5d0d908dda4e6f9e1d83f3d
SHA25662ef74fa661ffb4502aa1676a8431ec94e0866677519e30c719d1d1d1c0f40f9
SHA512e885fa60f4655be57582f6d25bdf4e29cd36cb00d541b653a929144f417b6a5733ad177edb48ae9cabcbae3a332f601e0f2d40e254f35ccb3552fd8815258169