Analysis
- user interaction
yes - max time kernel
11s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
- submitted
01/07/2026, 12:11
General
- Target doublelocker.apk
- Size 359KB
- Sample260701-pcq35sdv7p
- SHA256 79e602a062d05fbb1409afc16e6d41ac0645576b2b5c1899dc93e6852c30a71f
Score
7/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
- Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
owd.qusutsqfdo.mbpepvxhxly1⤵
- Makes use of the framework's Accessibility service
- Performs UI accessibility actions on behalf of the user
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
init.db
init.db-journal
init.db-journal
init.db-journal