Analysis
-
max time kernel
148s -
max time network
135s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
-
submitted
01-03-2024 05:07
General
-
Target
3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d.apk
-
Size
4.4MB
-
MD5
5d082ee96d47c95b57141c58c1101556
-
SHA1
0933eb400c15bdbbc075dbfb447cc81c2308e035
-
SHA256
3d4f63fc88ec8a4dfc9a5c3fee1a59ded40bbb2f4f04ed937c135b144e8a166d
-
SHA512
8577dad81c288504f202a399a8656bd641640cb7c2fe53fbc0fa383d8808bbf322393267a0e6ea54ede5e4c11f9d37fccfb647fbdca5cba5f920dce9bbeaa5bc
-
SSDEEP
98304:JaG20AJgNs1g1j1sv4dDv23eAbwdclxBfefdyoMOzfr9+fh:UG29gN9UydSccxB2fdy3Fh
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 2 TTPs 3 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.snaperfect.inframe11⤵
- Makes use of the framework's Accessibility service
- Removes its main activity from the application launcher
- Requests enabling of the accessibility settings.
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Uses Crypto APIs (Might try to encrypt user data)