Analysis
-
max time kernel
148s -
max time network
150s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
04/04/2025, 08:25
General
-
Target
promo.apk
-
Size
12.1MB
-
MD5
3f2506a80d5065e2d545899500e447fc
-
SHA1
a3718e2fdfb21896e1c20ed5d13b9faf0a63f699
-
SHA256
84421ce74388dc68fdb45dfcf8420910991e829b69ace11a6c70e0507163f2ff
-
SHA512
9fb52c9c25097751d852e380964102e9de2c8a8de62d13ef921bcf6ec31eff38da7f6d32e1b340212a76b66f38e9c1adc66efef3e018aae0e6630cd08bbc028b
-
SSDEEP
196608:E0ER65tEBBDjodumjbdvgdjr7+2LOD3+FHr2p9LvDEcGnWwpcKMKBYv:c6XEvDW3dvv2LOjQHip9Lv6nVTZ6v
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
com.mbon.cocoleens9000k1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20B
MD5d6ea019461671ae729691261cbdb2e45
SHA1980a183c51b94314887117d2d150883a42f83b84
SHA2561ed4ca672c92b231ac046c50cb0b4f4b688104b9a318a48ae566cd2f0bf6d523
SHA512d4329310857942f95628dedda7cf4d3f0e2c9f0dcaae56e048b40f803d940a0867d18f5f2f1931ffac45f179dccc3ad5fafdbf1ec9ae5fd0186ea64faf93fd91