Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    17-12-2024 22:12

General

  • Target

    1275274821722770919cc8bc57552d32109f51e790e598fd7eb39066095a2c30.apk

  • Size

    325KB

  • MD5

    d78185c527ae743cb6c129e307c1e0b4

  • SHA1

    196e82c702aec00e6c4703d165d183367319d76f

  • SHA256

    1275274821722770919cc8bc57552d32109f51e790e598fd7eb39066095a2c30

  • SHA512

    e92623253facc13ceae51b040b0cf87e7c75d5718fbea78a06b5a3860fbc3b1bb69dd50687ab93e4d02bc65e4a03e414f869d1c1c77d593f2be77c766d8db1ae

  • SSDEEP

    6144:GAT7JWaWckWVYCpFpS33eDc4UCtEdlHQGw6Rg0OaaNUurty/EuG3:GAT7JL4cBs3eAmtEdlHQcg07aNVtOnA

Malware Config

Extracted

Family

octo

C2

https://fakalersokakkal.xyz/M2I2ZjI1MzMxMmMx/

https://sarocakasaxe.xyz/M2I2ZjI1MzMxMmMx/

https://saxamaszuseko.xyz/M2I2ZjI1MzMxMmMx/

https://rasfakstumahoxexe.xyz/M2I2ZjI1MzMxMmMx/

https://sadasurapsomyivano.xyz/M2I2ZjI1MzMxMmMx/

https://yasasananas.xyz/M2I2ZjI1MzMxMmMx/

https://rasddassadazexe.xyz/M2I2ZjI1MzMxMmMx/

https://trasafsakaasassuheno.xyz/M2I2ZjI1MzMxMmMx/

https://zalizadsasasa2a.xyz/M2I2ZjI1MzMxMmMx/

AES_key

Signatures

Processes

  • com.nameown12
    1⤵
    • Removes its main activity from the application launcher
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Performs UI accessibility actions on behalf of the user
    • Queries the mobile country code (MCC)
    • Requests accessing notifications (often used to intercept notifications before users become aware).
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Requests modifying system settings.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4283

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads