d9b8dc8dd86bb98dc0d0b349df6ac20f5a0b6d485c1eac7aada73eb397000488

Analysis

max time kernel
1274886s
max time network
131s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
20-10-2023 07:29

Target

0beffb2cefb8ff111179a8beab37a3ed.apk
Size

700KB
MD5

0beffb2cefb8ff111179a8beab37a3ed
SHA1

b224b0d9115ab6fc496bc8c5b22a1a7d4f789b23
SHA256

d9b8dc8dd86bb98dc0d0b349df6ac20f5a0b6d485c1eac7aada73eb397000488
SHA512

97cad8c91679f5a2ea3184675c516b207f08b9b4c155f8a06f02f26e2ec8c07172d57a73b98e4b9f7654f1f87a1616263fc8dc51940d2fac8a2fe40c29634117
SSDEEP

12288:YtmcwOrKLKKO2DZdCfPF98wvusT3cgtN0FtQ6Rq21iQRg3CtWDhL:QmcndV2bCnowvHT3SFtQGNiQCVhL

Score

8^/10

evasion

Makes use of the framework's Accessibility service. 1 IoCs

Processes:

com.wechat.service

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.wechat.service

Removes a system notification. 1 IoCs
evasion

Processes:

com.wechat.service

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag com.wechat.service

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.wechat.service

com.wechat.service
1⤵
- Makes use of the framework's Accessibility service.
- Removes a system notification.
PID:5001

/storage/emulated/0/Config/sys/apps/log/log-MjAyMy0xMC0yMA== .txt

Filesize
28B

MD5
2504738ba3c0bddf38d8707300dfbe66

SHA1
ecdae50561929737123e91e6f3d35961b4c0c4c5

SHA256
6aebcac63d979c4ee8a7b484e636c63f4d694d4ccb415a45dd3846cadd5eeae9

SHA512
5c0066079999aa0414ccbe5b776ef2e5a0d9da762c9d20c58dc782ec712835a54b7f0d9318609b32a79b145b32d375fd4d670ed136c2b44a638177788d542b4b

Download Submit