8f4aa89b9e76c6df9820b51eb86baac71049ec5f6f552c398c97c466aec78dee

Analysis

max time kernel
46s
max time network
150s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
22-01-2024 22:01

Target

8f4aa89b9e76c6df9820b51eb86baac71049ec5f6f552c398c97c466aec78dee.apk
Size

169KB
MD5

5142fe471f8299ce9c0592da7bc7477a
SHA1

ae221dbe89195ff844a2d79b3b8d91f5b5785621
SHA256

8f4aa89b9e76c6df9820b51eb86baac71049ec5f6f552c398c97c466aec78dee
SHA512

1ebdeebf865b847c0d56b97447e0df50a6fd9d2a348ce38ab5855842143292796ebbac50fbe5c035cc5a00a9e2e8c76c9943ed5c5367dee396bc41680396e0df
SSDEEP

3072:6u4T86ZoKrDErE87Rp3UoROCbiNv8VyJ/WkjIMHNJ9BsHYa5raEnTLbv:xKr0v3LAmOjd3fs4aVrTvv

Score

8^/10

Makes use of the framework's Accessibility service 2 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	wocwvy.czyxoxmbauu.slsa
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	wocwvy.czyxoxmbauu.slsa

Removes its main activity from the application launcher 1 IoCs

pid	Process
5000	wocwvy.czyxoxmbauu.slsa

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	wocwvy.czyxoxmbauu.slsa

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	wocwvy.czyxoxmbauu.slsa