Resubmissions
18-08-2022 13:17
220818-qjnf9shhf3 10Analysis
-
max time kernel
2971309s -
max time network
26s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system -
submitted
18-08-2022 13:17
Static task
static1
Behavioral task
behavioral1
Sample
eda525375692b2217a9a12aad727fb4c.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
eda525375692b2217a9a12aad727fb4c.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
eda525375692b2217a9a12aad727fb4c.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
eda525375692b2217a9a12aad727fb4c.apk
-
Size
258KB
-
MD5
eda525375692b2217a9a12aad727fb4c
-
SHA1
16a0c2426e88b72902bd5f9900c0ebe4955b6029
-
SHA256
4aaefc66c082701e09bc1690f83571944b748bc0c958334cd505beebcc2ed4aa
-
SHA512
bd1915f8c497a20f4bbd409e332dc9c28736c854537e796ce9641a2d8093aeb5cd510b5e7da22477e1afa2ad7623aba3d1443a6f4b23c5eb73c94d05c57d42bf
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId app.online.myapplication Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText app.online.myapplication -
Acquires the wake lock. 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock app.online.myapplication -
Requests enabling of the accessibility settings. 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Intent action android.settings.ACCESSIBILITY_SETTINGS app.online.myapplication -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS app.online.myapplication -
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes:
app.online.myapplicationdescription ioc process Framework API call android.hardware.SensorManager.registerListener app.online.myapplication
Processes
-
app.online.myapplication1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4641