Resubmissions
23/12/2022, 07:38
221223-jgc47agb42 8Analysis
-
max time kernel
1035419s -
max time network
152s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
23/12/2022, 07:38
Static task
static1
Behavioral task
behavioral1
Sample
93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572.apk
-
Size
5.8MB
-
MD5
c5d12034694e80115e8e0fb599ae4718
-
SHA1
ac75884b3a8bd38bd3ffd759fa18a2583e7fe9d2
-
SHA256
93a8d9d57a816b1c0401660256db8e37d29a92a43cd7d9668f9d05db820aa572
-
SHA512
9f643a2966f0e21a12be11af1af3e905d73b8496eb09f31e124de0b177cb3bb3bed5339c77744852383bf2e351146420bbb4c7e2216389bb53b87f51a8f48fe4
-
SSDEEP
98304:+KWd2TBIwrYnhzd1gks9rAkq4JBJJfWemcmHetXbIJhiwG9ZLkzZIdyErazfr9Ca:bJYh7u98ktzTZMetXbcQ9ZoFIdyUkBVv
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 3 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.emo.radyodinle Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.emo.radyodinle Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText com.emo.radyodinle -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.emo.radyodinle -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.emo.radyodinle -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.emo.radyodinle -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.emo.radyodinle
Processes
-
com.emo.radyodinle1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Uses Crypto APIs (Might try to encrypt user data).
PID:4048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
166B
MD59f47baf3a9a6194affde23f6045a061d
SHA15f7777d88f68d11406d777a6221b79c66de22837
SHA2568300e9295420e9621c996b1e23bdc1c65a6707f72e12b73309667f7762917f50
SHA512cf224e18a29b3794f07cf96cdb1bbaf1ddaa6c56867429b02e93a173f262377721244383c2aad24ed46c6e9411e0ad8f4fdd7828de7c45c561fabb01836f9348