Resubmissions
07-07-2022 11:54
220707-n21hfahhg6 1004-07-2022 06:02
220704-grfa7ahac4 816-03-2022 13:46
220316-q2zl9aceeq 8Analysis
-
max time kernel
2466052s -
max time network
124s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
16-03-2022 13:46
General
-
Target
escobar.apk
-
Size
2.0MB
-
MD5
d57e1c11f915b874ef5c86cedb25abda
-
SHA1
22e943025f515a398b2f559c658a1a188d0d889f
-
SHA256
a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f
-
SHA512
2e8324559e46cb9f912eeb84b6e80a3838c71c4d045fd0a112aa3bea7fb8efdeb2ca03990a7189f5fec8d0a3f81fdaf2a98b8bce4edebc4afdc3813739bc8601
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
-
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
Processes
-
com.escobar.pablo1⤵
- Makes use of the framework's Accessibility service.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Removes a system notification.