Resubmissions

14-01-2025 05:44

250114-gfjt8szrbn 10

14-01-2025 05:43

250114-ge4g9aykgt 10

14-01-2025 05:39

250114-gctj9szqep 10

14-01-2025 05:35

250114-f993vazqak 10

14-01-2025 05:34

250114-f9l11szpgq 10

14-01-2025 05:31

250114-f76yeayjcw 10

14-01-2025 05:30

250114-f68evayjas 10

14-01-2025 05:29

250114-f6m4xazpcq 10

14-01-2025 05:27

250114-f5p7wazpbm 10

Analysis

  • max time kernel
    179s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    14-01-2025 05:35

General

  • Target

    insta_followers.apk

  • Size

    4.6MB

  • MD5

    51064cc8676f45813dec4c5a1c1ce150

  • SHA1

    e9d2c7b278c98f85481176c6089b2a74120c6b56

  • SHA256

    e232bbfa86980003e46cd2019243e2579b15c844957cd21e70f8d4300ce25f78

  • SHA512

    e380e740f4a91013e07e05848ebc4e64ac8278425697cd1da110ec940f6884402d4974302eff493ac685f6969d732e63e95304aaad9742e06f9d8fcd7da3d722

  • SSDEEP

    98304:SjbFZKFifcyWk4D+zfro+Pr0hOR6G21GB/EjJ9:IhsFTkP4h8F8b

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Performs UI accessibility actions on behalf of the user 1 TTPs 53 IoCs

    Application may abuse the accessibility service to prevent their removal.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.test.accessibility
    1⤵
    • Loads dropped Dex/Jar
    • Performs UI accessibility actions on behalf of the user
    • Requests enabling of the accessibility settings.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4349

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.test.accessibility/app_ded/7vRij3cSNi3sCbQE2dAmkCg23x8iPrCO.dex

    Filesize

    2.5MB

    MD5

    8b5230cead615f005f2171207699d8aa

    SHA1

    1fa3764bdda3aa85f0481f8d63d96517c2638e3e

    SHA256

    b6f3c778f8411b88897f99b57e4c9c5c2ed6102527dd816147f4ca28de8d4498

    SHA512

    4d1b05e242d151fdfed77f7fa92bcc211cd23e28af134aaa5b403607b2ded7db6b6fb1fcbd134ecf31170e874f1e3ffb9d028e6ea8328441a678b725a180f22c