Resubmissions
30-11-2023 18:27
231130-w3vmksga3z 1030-11-2023 18:24
231130-w16xtsfg85 1030-11-2023 18:20
231130-wy3sdsfg73 10Analysis
-
max time kernel
561771s -
max time network
156s -
platform
android_x86 -
resource
android-x86-arm-20231023-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system -
submitted
30-11-2023 18:24
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20231023-en
android-9-x86
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20231023.1-en
android-10-x64
1 signatures
150 seconds
General
-
Target
ready.apk
-
Size
6.2MB
-
MD5
8f28dd6d20a970276161c01af8e71c3f
-
SHA1
0860d9daa5e444d98b4fd71e19180aa9dfd509df
-
SHA256
2a42a44c6b0365ec61f9bad779498ab4fb8966b926675c375318e5b5917ec4cc
-
SHA512
7110916da8ff62eb143a02e167e48b8ddeaf861c467887dc3b37e062dc790b657591138aa02ae07940e35ae224ef0829982a6252e9545b3c6d981735ca1a919c
-
SSDEEP
24576:swcNfGM6TzZi7nzUdql6XlQhlOiDvVVVVVVAk3I/sHp9E:swcNfGMU6nz1l6XlelOiDISHE
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
Processes:
rick.gay.gaydescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications rick.gay.gay -
Acquires the wake lock. 1 IoCs
Processes:
rick.gay.gaydescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock rick.gay.gay -
Removes a system notification. 1 IoCs
Processes:
rick.gay.gaydescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag rick.gay.gay