Analysis
-
max time kernel
149s -
max time network
156s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
26/02/2025, 07:02
General
-
Target
ready.apk
-
Size
4.4MB
-
MD5
1c53ddd5d8720f7a59572bdddb603597
-
SHA1
1b86e6610d292fb46e87bb135ed7457a4fb3aeeb
-
SHA256
6cad0a9c721959e6f3c47a33dc6a3e34db3c07e4e5f2f563e4db30fe64838cd7
-
SHA512
f12a98dba654291a380c1feda10417a5354328256053733395f199a8a5331db9d2a26b60cbf7867e4be11a3b7c3046713a9ef23d469260a5067481f31ee9bc24
-
SSDEEP
98304:9X4Z7EEQAoyvLyCcunyJizqmzvzBfT20t4TpL5:BMexyvLyCcuyJizFzN9q5
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
bottom.vote.himself1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13B
MD5de2c41a51ee9246eb1708f65b511add0
SHA12f442d634c8a18760a232c8829d4b5d74a52f074
SHA256ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
SHA5127cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
-
Filesize
25B
MD5270cc9ddecd9e79d3c89bfad4c202c3d
SHA1c3a72a357af9198d5838214a7b453cbc55c83635
SHA256d72579fa36b62b75a584516611fd295c8411d2fc5bd60e511ce5350a6011bde9
SHA512556925f8b8391fab2a39b5766f98781bf17908af2c7b48f007dc73e7a96ee942ddbba7789a268d6f7a0a88d39543cd3d7215140adbb8127940c40b86ef2431b0
-
Filesize
25B
MD5bdb821a955117250611e94cd23842584
SHA181edcea1b44f94cfc140710c8410d0696b760c67
SHA256076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
SHA512e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
-
Filesize
252B
MD5baf99483ce31c4533996031c2ddd93ca
SHA1babdeff5a2286dfe813b874fc1b137cc9ea7e665
SHA256fa35fab5a8b7867b8643e9e6579f2b933f21c406325ec5856642a3ee2e12908b
SHA5124ce2e072582814ff1f117e47601577156a124f505e49d43b25bcc9cd79918715b8520f08ad7379add280f09c2b1a06110806b5ede15a629fbf8736646004e02e