Analysis
-
max time kernel
2884211s -
max time network
1820s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
27-12-2023 14:39
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
ready.apk
-
Size
8.5MB
-
MD5
55ff2e2bba0834105c862b6c7a8b3d96
-
SHA1
a346e97fe61493a0b0c003616521c2e6fa5b6b7f
-
SHA256
8f792d342af445088e67e557d891a540b38dbba37ff8417f4b238d6a6c33cce3
-
SHA512
673364d6c9124e19b6fac8fc419cb539828587042858c4d0282b27fa0711f5f3c29d6e3ab4ece18af1fe4c0e7b9bde664171385670eef18c3764ae68272c2208
-
SSDEEP
49152:cCnrb63HIJu3XArNvBILPKTgd8r6djLFiwUU7gOOkZmznzdGGMQTOlmUWYqU0cgW:ccOXIJrxsCGhEpU7gmZmznzBrTk0t41
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
earnings.nine.playboydescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId earnings.nine.playboy -
Tries to add a device administrator. 1 IoCs
Processes:
earnings.nine.playboydescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN earnings.nine.playboy -
Acquires the wake lock 1 IoCs
Processes:
earnings.nine.playboydescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock earnings.nine.playboy