Analysis
-
max time kernel
148s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
26-02-2024 22:07
Behavioral task
behavioral1
Sample
0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec.apk
-
Size
3.1MB
-
MD5
c42b44866924d3108a6ce8f80a5c7bb3
-
SHA1
fc1ffc20f850acd43d495a086272557b034b6ad9
-
SHA256
0bc6a18c026532dfc947353cee8bce13ac60960474aca808786910f09ceedfec
-
SHA512
ed2aacc78c326d9c973334d85a48f0ca107eec9ff83023a05edb4d36ba48f101dbac69911417dd51407f38fa01741d64736dff8182ce708664b7db754b78c98b
-
SSDEEP
49152:eCIXsZo5EEztRv1E4dG4NWLUaBkmvNZMSw4+sQZoBKnCniDzCWYFQ/YgJPmN:N+rrvcBkei+Q+snCnsfdqN
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
Processes:
com.google.services.comdescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.google.services.com -
Requests enabling of the accessibility settings. 1 IoCs
Processes:
com.google.services.comdescription ioc process Intent action android.settings.ACCESSIBILITY_SETTINGS com.google.services.com -
Tries to add a device administrator. 1 TTPs 1 IoCs
Processes:
com.google.services.comdescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN com.google.services.com