Analysis
-
max time kernel
155s -
max time network
166s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
03-02-2024 22:00
Static task
static1
Behavioral task
behavioral1
Sample
9aed0b9383cc72d621026b0be118473d1efeff57f75cf736dad8d2b105a1472d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
9aed0b9383cc72d621026b0be118473d1efeff57f75cf736dad8d2b105a1472d.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
9aed0b9383cc72d621026b0be118473d1efeff57f75cf736dad8d2b105a1472d.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
9aed0b9383cc72d621026b0be118473d1efeff57f75cf736dad8d2b105a1472d.apk
-
Size
3.8MB
-
MD5
4beca63290635f8c5ea570924864c290
-
SHA1
bc8e32f12d10f890c2dbe453c9ee18cdf76894de
-
SHA256
9aed0b9383cc72d621026b0be118473d1efeff57f75cf736dad8d2b105a1472d
-
SHA512
34714f99ab6b5e3c48426947a3ccbcc13be72da8727f812f9bdb9c36b7bd89af2bda79edd792d3a89c624089828c9b6a69955ba1fa182abc5cccceea24e6a3e9
-
SSDEEP
98304:ybH6vhv1inx4hSJvNYAkua5m54/aA4LlERd2ofreCV:ybH6vt1g4hS/yu/54/ralEf
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId gw.gx.gy Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText gw.gx.gy -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock gw.gx.gy -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS gw.gx.gy