Analysis
-
max time kernel
149s -
max time network
151s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
22-12-2024 02:36
General
-
Target
dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545.apk
-
Size
9.5MB
-
MD5
d01fb368fde611624b442937b0ea21f7
-
SHA1
f82d1cac49a0dd7e8714fc6a0bc4d74473c97c10
-
SHA256
dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545
-
SHA512
476e61de68dd64477a1449db51646ae0e6b9b0c5f9d95ceed491d51975b602a771c17ad2bc7c374420990a71db988432fbaec97d3a99e26449df47f0b17f51ef
-
SSDEEP
98304:XKL5O5Pudk+nD+2R456BjII/D1vybK9aj+sr/mzEwzBOT00tEEnu:XldujDXu56nDX9ajvruzEdnM
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
epointevn.gov.vn1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
21B
MD534a5edc8bd2151bdc75c7fbead644743
SHA1448c1387ca5ca4e59410ab28bced843fb1737f71
SHA256b02a589a163b952e2befd2954bf5e1c2959b223eb190c7039fba0e32822a4944
SHA512619f05c22228a4dfc33906dcc6c22e847899ad44f09c3288cdcfb330390b07e305abb8744ea02f3df8da2b66ae1d55060bd8312b1d234786aa32f0bf5aed2e5e
-
Filesize
21B
MD51c4cb8fc3b8707fdc198e4c2ada2d59e
SHA1874a29a66d309b6c87cb0d2de923f4d18ade8cb1
SHA256ca9cbad833fda23e394666e4dd17c4a3e930299b3ea144a35b5ec3e459645842
SHA5125018a4d75202fc293bb547e5aba8a167cbf80d74424d93792bbc80adbcd083454e55abfec22da1209aea408b8433657d2a3f80e95c47f33664d9391a3fbee431
-
Filesize
25B
MD5bdb821a955117250611e94cd23842584
SHA181edcea1b44f94cfc140710c8410d0696b760c67
SHA256076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
SHA512e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268