Analysis
-
max time kernel
1150371s -
max time network
69s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system -
submitted
18-10-2023 20:53
General
-
Target
WH_Final5065.apk
-
Size
181KB
-
MD5
45990bb5b26babf7fd4b7ced49217320
-
SHA1
fbfba7b69e56db6a3f60f6f0b588789ddadc4f11
-
SHA256
95cf1b24172243a1813498b865f0c15ea161500bb3f2f79d3d6ff4ff3ca318a5
-
SHA512
f3421cb0558258b63e442d8c0ec0b65671eeb3459e0c2b346bbf67bf4598fbf9f5d8f4443abfe47d371bf90bcafe72a1bc85c44c9704c0079230ae695da1c5c8
-
SSDEEP
3072:Q/YaYgr/TuZCkzYl+0RCm0puu7XFS4iE3vMPoonx85TKP8hBsHYa5raEnTdy:QLzr0RzETRCJBS4iEEnCVRs4aVrTg
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText wocwvy.czyxoxmbauu.slsa Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId wocwvy.czyxoxmbauu.slsa -
pid Process 4862 wocwvy.czyxoxmbauu.slsa -
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock wocwvy.czyxoxmbauu.slsa -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener wocwvy.czyxoxmbauu.slsa