Analysis
- max time kernel
899s - max time network
895s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
15/06/2026, 15:00
Behavioral task
behavioral1
Sample
Blockchain.apk
Resource
android-x86-arm-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
Blockchain.apk
Resource
android-x64-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
Blockchain.apk
Resource
android-x64-arm64-20260325-en
5 signatures
900 seconds
General
- Target Blockchain.apk
- Size 4.4MB
- Sample260615-sdfwcaez2j
- SHA256 091bae0fade92d4c3e4692473f1c9923b546850d12dd66355354bad39400164d
- MD5 9b2e258af5b612a4a53acb297d1e7d5f
- SHA1 b77763db3dd8b96601c60c06724d45ac7f4048c5
- SHA512 4891665885c4edf323ee4cd207a64ee377c58eebc922334bc9faee8e0a5cb7d22624d26a375176147dbc7feef73d2866ee37cccfaf882cc9e2e19adf944f5baf
- SSDEEP 98304:KNe++fOq8NWLPfK1IY7O+sVhRCVRzmzrzBRTV0t4yrke:KNe+OucLn07DsVKHyzjqJ3
- TLSH T1B4260203FB45D687D8AA93F66F230DA91A130F54C603BBE34461BA6D2D772D14DC6A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.elect.di - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.elect.di - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.elect.di - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.elect.di - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.elect.di
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-06-15.txt
- Size 13B
- SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
- MD5 de2c41a51ee9246eb1708f65b511add0
- SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
- SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-06-15.txt
- Size 29B
- SHA256 9249d7a7ef797ed2cb4baee1a99d10ab9e90e3d57da0321e02b3c86c6ef6c307
- MD5 d9f3ab668817c85d47ccc72a4be5051c
- SHA1 b984fec113e42fe03e7007c14202217931a8c79d
- SHA512 48a7c0c79a73828b99ed2936872bf712d1f82996c99a3fc48f11160d1c584de394b36fce64740729f515fa02b68b32fc9805611182f5ce97972435b2a2189651
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-06-15.txt
- Size 25B
- SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
- MD5 bdb821a955117250611e94cd23842584
- SHA1 81edcea1b44f94cfc140710c8410d0696b760c67
- SHA512 e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
- MD5 SHA1 SHA512