hxxps://dlacrew[.]com/ATO

Analysis

max time kernel
467484s
max time network
145s
platform
android_x64
resource
android-x64-arm64-20230831-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
submitted
10/10/2023, 23:09

Score

7^/10

evasion

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.chrome

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
47	ipapi.co
48	ipapi.co

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.android.chrome

com.android.chrome
1⤵
- Acquires the wake lock.
- Removes a system notification.
PID:4454