Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    18-12-2024 22:05

General

  • Target

    8bb4085f30e800880dda6ba6f9749e3e9da9075a9defb665dca87324cc378c45.apk

  • Size

    996KB

  • MD5

    ac0b1f475d00c7d72780d1512bd435da

  • SHA1

    63e0952fd9fad4b877ceace56e53143f00530488

  • SHA256

    8bb4085f30e800880dda6ba6f9749e3e9da9075a9defb665dca87324cc378c45

  • SHA512

    579fc3127a114a4ea42d32cf488909e5cceb35fcb15ae4c7c2cc09892525d7680061cfa1f9de3eaa640bda9b16956def385374f589940f98fbc887c4856ad22f

  • SSDEEP

    24576:Lks8FwpIYA3xHx9K0sCIjMko/4qLUWHUiAh6fHN:LkFwprAhH3K0sCIjMk7qpfAh6fHN

Malware Config

Signatures

Processes

  • cj7.hunting
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Tries to add a device administrator.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4256
    • su
      2⤵
        PID:4309
      • su
        2⤵
          PID:4536
        • su
          2⤵
            PID:4570
          • su
            2⤵
              PID:4599
            • su
              2⤵
                PID:4628
              • su
                2⤵
                  PID:4659
                • su
                  2⤵
                    PID:4687
                  • su
                    2⤵
                      PID:4718
                    • su
                      2⤵
                        PID:4746
                      • su
                        2⤵
                          PID:4775
                        • su
                          2⤵
                            PID:4825
                          • su
                            2⤵
                              PID:4854
                            • su
                              2⤵
                                PID:4882
                              • su
                                2⤵
                                  PID:4916
                                • su
                                  2⤵
                                    PID:4945
                                  • su
                                    2⤵
                                      PID:4973
                                    • su
                                      2⤵
                                        PID:5021

                                    Network

                                    MITRE ATT&CK Mobile v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • /storage/emulated/0/systeminformation.android.app/config18-12-2024.log

                                      Filesize

                                      62B

                                      MD5

                                      fc43add074085ee5bbf1a75973db863d

                                      SHA1

                                      70c61b68a1a89500c05921300b1a9434e1254c6c

                                      SHA256

                                      4c2144357e2847f4f8038267afc59f29b90452b1cf7352cd14d86c6ced8d5eaa

                                      SHA512

                                      cfcb1f0dda0a62c0079d647753a885a008eb62138e4104a493de6363dc3482268106d20af7648923765a6fb119fba3304bd8783c4204a26ceb024bb45e9ba52f

                                    • /storage/emulated/0/systeminformation.android.app/config18-12-2024.log

                                      Filesize

                                      53B

                                      MD5

                                      d862ae3c5ba3ed67057e44ee84ace10a

                                      SHA1

                                      c9eb60e0fc71e7f4930406badc18df9f4549988e

                                      SHA256

                                      563a64d425d4724355dd099cf9f21f109fe69a430121b74873fcc7f7625b8be8

                                      SHA512

                                      397f09bb31855fc01089510078d1dfde9bb470e2d0d4b823862743ce0e5152f3df6936b1d3b48ad688dfa81891776cc57a6f8f1d5381bbe0657d69036fcad7af