Overview

overview

10

Static

static

10

cheat (1).apk

android-11-x64

7

Analysis

  • max time kernel
    169s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    24-11-2024 16:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cheat (1).apk

  • Size

    4.6MB

  • MD5

    7f0ade62ea3dfafdc6b67f58cf91de99

  • SHA1

    8f874745ee648c116477ec8dc25d4a1f5cc54a2f

  • SHA256

    b93be3c94c2c3955d41ccf5cdc455fbe38100784d1db6e642e23ca3e3a6e01e7

  • SHA512

    814126b46cbda5980fc4f9767f6ec4e7332f5be95fc6a9115f014f39c95ba170e9ca3eb079d3352c349546d9e591901271c88ec9a909aad9503f66729a50e888

  • SSDEEP

    98304:OrYoIO3SdOPY9si9zB6mVNj5jKamz1qzB+TH0tOEqkl:OrYoIeSYJi9zB6mVp6z1jYZH

Score
7/10
collectioncredential_accessevasionexecutionpersistence

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 64 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access
  • Acquires the wake lock 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • build.ledear.ydoal
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Requests enabling of the accessibility settings.
    • Schedules tasks to execute at a specified time
    PID:4513

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/AppData/meta_data0
    Filesize

    7KB

    MD5

    effbc10b41f027e5c2130835d524c99d

    SHA1

    affb65361d7a36d00e402ad869696578b5ac3259

    SHA256

    566fb91b6bf186c05c4ec051aa2e2802961cbb158df24a8fecaa0678febece84

    SHA512

    b2ddd0142a80663097e9b71d8d654d88382ef8f765c92f0c8fbf600f1174cb1b1e9e61088f954e609e6d2402fd4750b88945af7c1080018b991f2e6e6d9ad52a

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2024-11-24.txt
    Filesize

    13B

    MD5

    de2c41a51ee9246eb1708f65b511add0

    SHA1

    2f442d634c8a18760a232c8829d4b5d74a52f074

    SHA256

    ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

    SHA512

    7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2024-11-24.txt
    Filesize

    21B

    MD5

    57b7126d83229ef0dbb8568e661f15e9

    SHA1

    e29dc79430f2d036b389e7f9a4451d3ecf522f13

    SHA256

    636780920ab98968f3051218a058dee71efb8c7f18525d4cc566ea2f729beb8f

    SHA512

    e6e756b90e06fd5faff41094ead9abaeb2fc3a7fa5d910683b0474c8b5b3cdbd10b3ae10206ed352bc1bed7a0ee54d043e22cb37ddce8712bdf47153fd7ddfac

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2024-11-24.txt
    Filesize

    57B

    MD5

    885433a1f7d44d87a0893ba79d453f08

    SHA1

    b1f84f153fcc7b0daff9afc67455f16235fc6954

    SHA256

    45c52cbdd5fffef6f772f46722f6dfed63dc9105d8c0a72e7965752ef7bd8677

    SHA512

    859f430d615dd2458b161e25a134c20047edee7111be8b9a08ba4c806ab44c73bd4532b69a8c96854f81368bf97a2d8dab217ca327c3521ac569a3e3aca59c5e

    Download Submit