Analysis
-
max time kernel
2508720s -
max time network
161s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system -
submitted
14-09-2023 21:09
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20230831-en
android-10-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
macos-20230831-en
macos-10.15-amd64
0 signatures
150 seconds
General
-
Target
ready.apk
-
Size
3.8MB
-
MD5
cbba07cac36c13850c1c0898d00bfbd0
-
SHA1
5a4dc213d4cf6461d8a5ac1c8b49dd5fefdca459
-
SHA256
5e18b2f454ef7536d3301f72a53ced7827d0032eb479aeca1001095df9eefda4
-
SHA512
fecfad88630c519e0ed3aa9efc6a6303151fa742477959b97390d5fee665c65ca045fae81d826425987ed30bd19939a60612db048bf9107c91e1a5687e15841e
-
SSDEEP
98304:aup12jvFp+CQNaI87791LehbimzTzBtTA0tQasb5G:aup6QNy+NzjrQG
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
Processes:
missing.sold.suspendeddescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications missing.sold.suspended -
Acquires the wake lock. 1 IoCs
Processes:
missing.sold.suspendeddescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock missing.sold.suspended -
Removes a system notification. 1 IoCs
Processes:
missing.sold.suspendeddescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag missing.sold.suspended