Analysis
- max time kernel
149s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
22/09/2026, 17:33
Behavioral task
behavioral1
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
- Size 9.4MB
- Sample260922-v5damsbe89
- SHA256 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a
- MD5 6b5399636bddba6e75dbd21e6c6226ac
- SHA1 a5343d8a9ba0b5c2d6cd77bad951bc3f200f2b34
- SHA512 7cd2257802ffe634096b714108b117f5804ab60c32b957487bffb092636587b0fd61231da58227933daddde7a640ae3fa685644c39e609d3b59c7fa1f7b1ee9a
- SSDEEP 98304:dPJc8hPWoP78htta0jXCVkVmzRzBiTJ0txlg8V:dPJtf8httRD+kYz+mX
- TLSH T1C0A6F013FB45C69BD4AAC3F06F271FA929430F18CA52AAE74194766E2D772D10DC1ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId generating.purpose.nightlife - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock generating.purpose.nightlife - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground generating.purpose.nightlife - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver generating.purpose.nightlife - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule generating.purpose.nightlife
Processes
-
generating.purpose.nightlife1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
PID:5079
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-24.txt
- Size 13B
- SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
- MD5 de2c41a51ee9246eb1708f65b511add0
- SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
- SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-24.txt
- Size 41B
- SHA256 db5992a81fedfff9e5af0b33da2d87db883bdf163eacdd3b6e117a52ea406d2e
- MD5 5234ee1e67648303577e7384b3f5fc4a
- SHA1 c64897dc9a4aaeb5e9e6b9a88d3f5d83f15b77df
- SHA512 54e519c795577be07bb4984274d447f4beaeb9e5534cdec4f986bbdb7697d4752a3672fdfae56f43153abcb69b0d0bb068f2f5d501375671a019610f3dc06899
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-24.txt
- Size 41B
- SHA256 517d3c957e85a4bcb6c4e1cd27938419239ae526b81f7552da6b2ed489aeb98c
- MD5 d17d5a85ce9c49ecda832e03dc998d4c
- SHA1 f192357a7db597836d509e54f2915e4ffaa4ca75
- SHA512 0430c3c98a853573ef1a4e23717f9454d11337803770518e29d135d014251d481d747d43a7285bc32856f0a4d83af947c9bb148598cf18f74a80195076de9407
- MD5 SHA1 SHA512