Analysis
-
max time kernel
149s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
28-11-2024 02:02
General
-
Target
ready.apk
-
Size
38.9MB
-
MD5
82b614de8c5623c9e46194f1d155016e
-
SHA1
3d22abb31a546f14e9171d0b0ac9f291ca627ec7
-
SHA256
dbf32f8c2f93963373dabcc455029d1dbf1388019e50a681a4a4d75c9fe6072a
-
SHA512
4b783d8ef4d0b9574b8aa34fcd2b490263d6d01e9fc126668c52b57ba89fb8c2f562baa70ba18e701d2c1c57e1a10de10c9d8d50d05205b2fe50c66a689e46b8
-
SSDEEP
49152:AhL0S2yoyxw1l436LZ2wZlybbZXfv/6ImzpzdGGjQTOCMUkYqb0cgxsGwikC/:Qlxw1l436g/ZPvCImzpzBkTs0txsa/
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
jar.iowa.satin1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1Suppress Application Icon
1Input Injection
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21B
MD5656aa6c2bf935e573a2e5c628a244c19
SHA19756fb37d312a02ba4721e8a22c9be2c8c1c307c
SHA2566b888d5c2c21688f4510bc0b8cb25b464129123efa92808b9936fa5550d6541d
SHA5128e098e7d24b91499506cab82e2ea9da024b58d0795203e3a4e3b72f9ea7c2104971d48758b31e0d6cdaedf9f4d3f6ef8081ff873b93bfd4e8f164ba6f2051797