Overview

overview

10

Static

static

10

ready.apk

android-10-x64

7

ready.apk

android-13-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    17-02-2025 17:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ready.apk

  • Size

    9.4MB

  • MD5

    b5b733fe818647c731a8e5f1f839c332

  • SHA1

    078e18aadc08dd26e410785426ab19ede31a1a67

  • SHA256

    84298b63d63c59ba63775367bbc615a0fa1aeb2b9f02cb4a2b664f611aaa5067

  • SHA512

    5e7b87e99550b02e371584b081fa0a731d3d77f3b42a992b0d5e47c5b74beaae53e202d6452caff7b15c76e88f7aa5c4650f0ed2c3fa87e4143fe36f63aa5606

  • SSDEEP

    98304:ENNGh4aOCizJl4Ir6COvecaLWFDauKmzxzB3TE0tlp3C:Ee4ZR4IrDOWcf+ulzn3+

Score
7/10
collectioncredential_accessdefense_evasionexecutionpersistence

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Requests enabling of the accessibility settings. 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • zealand.barry.lace
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Schedules tasks to execute at a specified time
    PID:4506

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2025-02-17.txt
    Filesize

    13B

    MD5

    de2c41a51ee9246eb1708f65b511add0

    SHA1

    2f442d634c8a18760a232c8829d4b5d74a52f074

    SHA256

    ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

    SHA512

    7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2025-02-17.txt
    Filesize

    37B

    MD5

    68958bdb3ef336ceae6cfe318d2890d8

    SHA1

    483fd45dffa2dbc5985a3663121af0580ba4bf57

    SHA256

    88a471df27409127d1b88585624c900ba8a849288d19d385c59e0915713bf58b

    SHA512

    7c02aeb36b951ec12d9c1f503ad6ec25a2562c2e4ed3fbc99ebf9828756c2cd1e0d0f7e8d54d86577d289c07d3bc4b9ebf9c19ff92ea0b19bde9258c8a5902a8

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2025-02-17.txt
    Filesize

    600B

    MD5

    b1b142a87afea571b3e0ba72a31ffbd7

    SHA1

    d7a0fe8c79ddc9a5f9cbbde513a17db6206dece9

    SHA256

    ee3814fcbd2534762cfcbdfe2606b507e0d9445c3646532a13bb2d087713590c

    SHA512

    a6390beb53c86773b7dae11a8bd5c1041c917934e44a936633376e6359a2bf7c2dabb0cc6c372f2508c7cee50f5e232f5a42c2c3df530355df7073108d515ab3

    Download Submit