Overview

overview

10

Static

static

10

ready.apk

android-10-x64

7

Analysis

  • max time kernel
    116s
  • max time network
    112s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    29-12-2024 11:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ready.apk

  • Size

    9.4MB

  • MD5

    ce7bda4200aa4913ace1cf382c70c816

  • SHA1

    324ea771610ad61f7471112981bd1b53219ec93e

  • SHA256

    a0709481e32220358ffbdd6c1c857d74e275eb5e64a5955603b94cabfeca494f

  • SHA512

    4e9086bdd097f611ef558d0dbfaedffc806cad127ffceec3c9615094c1ccee1b92feb998b56b3550e526214564c60c5191bfb38c3a270538cdfe2bb866bc69a3

  • SSDEEP

    98304:kP5EWnXbNRJB1vpwOTGU9vmzA0zBGTH0t0zBa:kP5EWnXpRJeOTG8+zAdY5

Score
7/10
collectioncredential_accessevasionexecutionpersistence

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • qualities.chocolate.clinton
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:4995

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2024-12-29.txt
    Filesize

    13B

    MD5

    de2c41a51ee9246eb1708f65b511add0

    SHA1

    2f442d634c8a18760a232c8829d4b5d74a52f074

    SHA256

    ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

    SHA512

    7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2024-12-29.txt
    Filesize

    33B

    MD5

    1042716fb9e433e581e163a900b70b02

    SHA1

    c2e4871c379fb031d26cb8ebd5b0cf10f194ce4b

    SHA256

    c76dc073f5f5051c65cce3a6fac5c573d89ae01a687f2187f0a21ea02e1db4b4

    SHA512

    91e3314d22e9f63521371f6f4b9817deebd5c6e1e98412b36ca1480ce8fce1a6397aa95a4105ac0a819b0902303f598210109dad8a52134e116cfffd3cc4e8a7

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2024-12-29.txt
    Filesize

    142B

    MD5

    f36e24532a966d48f089ddb853ea8b07

    SHA1

    78d786bba438b7650c749f60cc2fb442d7536c61

    SHA256

    f141378bcb8a0c4ed7662a4382f7222f375a9d482f76da8731d5c3ba0af2c54a

    SHA512

    e9dc8957f20f44d7ae3995cbc45f9d8fd866d32ffb98fc7a3d94657dd39cea37970fd1cefebe9d95ececd403cdc9b6e0f448fac1b6da019feb4e11be58827cd4

    Download Submit