Analysis
-
max time kernel
2891725s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20230831-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system -
submitted
19-09-2023 07:31
Static task
static1
Behavioral task
behavioral1
Sample
4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral2
Sample
4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral3
Sample
4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1.apk
Resource
android-x86-arm-20230831-en
General
-
Target
4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1.apk
-
Size
3.7MB
-
MD5
de51b859f41b6a9138285cf26a1fad84
-
SHA1
a2189ca8db0f01435282fac0f5a44005751604bb
-
SHA256
4e97b01d24ec02e60c7f3d1097b2adf262fb5496d1cac466689ab9e5965317b1
-
SHA512
8f96cc28a01a36f37bbfb7863560a55115ad73ba97daf57ff515816838dd5b30d95c3422fc72f880492116620209da5faccf0fb723fe935a1c1df45664d4d98f
-
SSDEEP
98304:4fYw/F/AWO7+d00Vs18LnORE/TRZWT1wS/jl1v:4f3Ow00ayTPLTWT9B
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId ycpgmsxy.rqhfesas Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId ycpgmsxy.rqhfesas -
pid Process 4147 ycpgmsxy.rqhfesas -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ycpgmsxy.rqhfesas