Analysis
-
max time kernel
2449984s -
max time network
151s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20-12-2023 08:36
Behavioral task
behavioral1
Sample
9687682ceb5bcb544331eabd61ec3b65accbc691609691f826518d40d2d5304b.apk
Behavioral task
behavioral2
Sample
9687682ceb5bcb544331eabd61ec3b65accbc691609691f826518d40d2d5304b.apk
Resource
android-x64-20231215-en
General
-
Target
9687682ceb5bcb544331eabd61ec3b65accbc691609691f826518d40d2d5304b.apk
-
Size
289KB
-
MD5
d5577c5f181d5496ae2ebd295a705a73
-
SHA1
cc65624c27c8183c777d395f91f8275f4800075b
-
SHA256
9687682ceb5bcb544331eabd61ec3b65accbc691609691f826518d40d2d5304b
-
SHA512
91f54d4451fdbd9b9b92cda4f6879a27ebb6997e6cc2ced9ee7c04e06bff394f33ea664aa7bf0a0a79b19f1d1bbe375deb0bbc1926433dd186ecb8d820728f97
-
SSDEEP
6144:t00Ed5Dbd5D0d5D0d5D0d5Du62ZKa6j5XeFVSAmgYSc6t:tmdRbdR0dR0dR0dRwg5XCY+
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId wocwvy.czyxoxmbauu.slsa Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText wocwvy.czyxoxmbauu.slsa -
pid Process 4996 wocwvy.czyxoxmbauu.slsa -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock wocwvy.czyxoxmbauu.slsa -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener wocwvy.czyxoxmbauu.slsa