Analysis
- max time kernel
149s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
06/09/2026, 12:20
Behavioral task
behavioral1
Sample
my-apk.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
my-apk.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
my-apk.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target my-apk.apk
- Size 4.4MB
- Sample260906-ph3zwsap3x
- SHA256 3daebe6a14c834321096190593ddb9ab8988e7532baef29c7d206636c9adbdd7
- MD5 370416134d3745be895119be16a4ca7b
- SHA1 c100b6a4af0666ecc5a3ed064ec233da7ad3db4d
- SHA512 a2403bdf834c6ec7b22d84ddc3ff686bca2b0eb599e20396e967eb15e84270cc3542993da93237d1f174fab97bb451757571935d90999bb9361ad92bf5aeb399
- SSDEEP 98304:bK1klKax0Lk0bBN0LDmQ/mz3zBvTt0t4OLxu:bKmbx0H9qLDFuz5iHk
- TLSH T1E926F103FB44CA87D8BA83F66F270DA92A131F14CA03A7E74455366E2D771D14ED6A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId build.ledear.apk - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock build.ledear.apk - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver build.ledear.apk - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule build.ledear.apk
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
- Size 21B
- SHA256 acd8d0a2138f42844e690c3e9cf7f03f31d8950ca4cacca08ea8dbbddc3d01da
- MD5 f8cb04699562587f8fb3f69aa1aa3e7e
- SHA1 106fc35dc40da5e1ab95043c2ec5ef3d4643fcf8
- SHA512 f59ccff475dab8f85a83142c7592c0956c4d8d6d7e38110b1462fd6dfe5839d52cfad38321cfac7d04f883583ad7dede636ad38156f2762fdad4f46ec398516b
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
- Size 13B
- SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
- MD5 de2c41a51ee9246eb1708f65b511add0
- SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
- SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
- Size 25B
- SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
- MD5 bdb821a955117250611e94cd23842584
- SHA1 81edcea1b44f94cfc140710c8410d0696b760c67
- SHA512 e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
- MD5 SHA1 SHA512