Overview

overview

10

Static

static

10

ready.apk

android-11-x64

7

ready.apk

android-13-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    17-02-2025 17:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ready.apk

  • Size

    9.4MB

  • MD5

    b5b733fe818647c731a8e5f1f839c332

  • SHA1

    078e18aadc08dd26e410785426ab19ede31a1a67

  • SHA256

    84298b63d63c59ba63775367bbc615a0fa1aeb2b9f02cb4a2b664f611aaa5067

  • SHA512

    5e7b87e99550b02e371584b081fa0a731d3d77f3b42a992b0d5e47c5b74beaae53e202d6452caff7b15c76e88f7aa5c4650f0ed2c3fa87e4143fe36f63aa5606

  • SSDEEP

    98304:ENNGh4aOCizJl4Ir6COvecaLWFDauKmzxzB3TE0tlp3C:Ee4ZR4IrDOWcf+ulzn3+

Score
7/10
collectioncredential_accessdefense_evasionexecutionpersistence

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Requests enabling of the accessibility settings. 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • zealand.barry.lace
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Schedules tasks to execute at a specified time
    PID:4487

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Config/sys/apps/log/log-2025-02-17.txt
    Filesize

    13B

    MD5

    de2c41a51ee9246eb1708f65b511add0

    SHA1

    2f442d634c8a18760a232c8829d4b5d74a52f074

    SHA256

    ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab

    SHA512

    7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a

    Download Submit

  • /storage/emulated/0/Config/sys/apps/log/log-2025-02-17.txt
    Filesize

    389B

    MD5

    484cab0071163f4060652a0a474631bc

    SHA1

    42182bf062fc293d29ad24af64edacd11905ddc3

    SHA256

    646305652bfd5738f6e885f74498e8d2b9f696b15b0431d1ef1d4b637b03b778

    SHA512

    4a0ef237efd2753d124b6ee01a7b796d0aaea8008da20b4eef6056e60ab5ddd5cd98c6ed2c27257d53b426e3b829c1b967c25058fb4e119198729e1b531cd77a

    Download Submit