c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504

Resubmissions

02/01/2024, 16:08

max time kernel
3404923s
max time network
160s
platform
android_x64
resource
android-33-x64-arm64-20231215-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
submitted
02/01/2024, 16:08

Target

appปลอมกรมที่ดิน_DOL.apk
Size

11.9MB
MD5

2e6530985058179a8adf2bb1e729d516
SHA1

1ac24292df9fb97a07472281378ca460d3a419a0
SHA256

c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504
SHA512

99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb
SSDEEP

196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A

Score

8^/10

Makes use of the framework's Accessibility service 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	nrmahn.kwqzdrb.nahh
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	nrmahn.kwqzdrb.nahh

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	nrmahn.kwqzdrb.nahh

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	nrmahn.kwqzdrb.nahh