Analysis
-
max time kernel
149s -
max time network
146s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
23-02-2025 17:37
Behavioral task
behavioral1
Sample
Blockchain.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Blockchain.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Blockchain.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
Blockchain.apk
-
Size
4.4MB
-
MD5
14adaac828ad641fc72e4b2271c1980b
-
SHA1
2b15b7a0c580fd38d0d40192ef4d12602348220e
-
SHA256
b55a6c06af55de81570737a0a13c2e46c21a45be0cc43648368335d0495e996c
-
SHA512
642f6e677428735c44d125ffabb1d38477d12d3d72eb2b382e270bbd5e2b96923ea106a6110f2a20e8a41bc7deb4c5262ce7c9409fcbe5b45ce8f13a087ad651
-
SSDEEP
98304:3ETNMlYJSFF5FZ+RnBSgsBcdb/mzrzB9Tt0tsC200:3VYJSnvZgBSgsqdbuzni9K
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.christmas.dresses -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.christmas.dresses -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.christmas.dresses -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.christmas.dresses
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
25B
MD5f887057946e442b747840a9140cf77ed
SHA17eb1b8cfe9de8f236fb0f5619a69690f123d82e3
SHA2565a8041977eab945a751d8549895ee2cc4984ba9d3737d78611482c4e7b992659
SHA512d9988b569f7923f73cc3f347b65130c5903bbf111f90f1160ef0b680632d89548334e76259cd3c1c4e14469b3a6a6d235ce3c570f9d646acea4a00f33f78e785
-
Filesize
25B
MD5bdb821a955117250611e94cd23842584
SHA181edcea1b44f94cfc140710c8410d0696b760c67
SHA256076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
SHA512e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268