Analysis
-
max time kernel
3592151s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
04-01-2024 20:08
Behavioral task
behavioral1
Sample
readyapk.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
readyapk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
readyapk.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
readyapk.apk
-
Size
3.7MB
-
MD5
18dd86eccb7ee4796bf12eb6359a6389
-
SHA1
e4e6d32c59964280d83dddffcb59bc424d0fbdfa
-
SHA256
f42da00a548bc5bfae8514664424b595ef99e417bb3827e0a8ea417d5234928a
-
SHA512
0f3af65daa9b1ef51937bf4694f940da7674f4fbfbe4af30dc6962f1bfae0328d8a4ce329facf31b935fe3c7faa404f23860c7ca9ae69bfd5d47f53ceffe1370
-
SSDEEP
98304:CU4JB3khGshHzCwxGxHE4/LdsumzLzB9TG0tQqcR:oBkXGwxGxHE4/JspzzN6
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
Processes:
improve.able.raymonddescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId improve.able.raymond -
Acquires the wake lock 1 IoCs
Processes:
improve.able.raymonddescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock improve.able.raymond -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
Processes:
improve.able.raymonddescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS improve.able.raymond