Analysis
-
max time kernel
148s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
21-01-2024 22:00
Behavioral task
behavioral1
Sample
6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb.apk
-
Size
760KB
-
MD5
8df76babec2ae20435cfa432bc902ef7
-
SHA1
958221e59ed9a605d8e36f4cf2cdb4aebba60b3b
-
SHA256
6b17e0b392ad18ecd7fe14122206093a3d4c92bd5ab73d7c249e10fab9eedccb
-
SHA512
d8a88fb7f2e9eef446535108a933f7cd6463e38ff6e17c9d9619aa757ef3ebd52a7b436e89dd88ea214d4464119c655e717255a41fce173a2d59d26ee180e0da
-
SSDEEP
12288:yX4yN7a1a8LrehW1VBvuJ5WmpYshXZPbGwidNpgy:yXRa1a2ehCBvuJ5WmD9idNph
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
Processes:
cmf0.c3b5bm90zq.patchdescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
Processes:
cmf0.c3b5bm90zq.patchdescription ioc process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 1 IoCs
Processes:
cmf0.c3b5bm90zq.patchdescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch