Analysis
-
max time kernel
2961133s -
max time network
33s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system -
submitted
18-08-2022 10:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
16563634ddc5a49ead97115e984d02b9.apk
Resource
android-x86-arm-20220621-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
16563634ddc5a49ead97115e984d02b9.apk
Resource
android-x64-20220621-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
16563634ddc5a49ead97115e984d02b9.apk
Resource
android-x64-arm64-20220621-en
0 signatures
150 seconds
General
-
Target
16563634ddc5a49ead97115e984d02b9.apk
-
Size
258KB
-
MD5
16563634ddc5a49ead97115e984d02b9
-
SHA1
e5d118ee6834de783af30265f024e6c8e4b5ace3
-
SHA256
61705cb4ce8204ef7fbed52141c1594af3360fb378fef853f8282a56403a6ac2
-
SHA512
3e6c28ad52d35fb478d7cf97f9abb789c41e4d7df057182063acc640e628b0bf8e123c33cc4626a1e227199d79ebc9902a8bfd9b428edb85a2bc4bc45149a5b7
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId app.online.myapplication Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText app.online.myapplication -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.online.myapplication -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS app.online.myapplication -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS app.online.myapplication -
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener app.online.myapplication
Processes
-
app.online.myapplication1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4280