Analysis
- max time kernel
150s - max time network
157s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
- submitted
10/03/2024, 22:08
General
- Target 8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c.apk
- Size 85KB
- Sample240310-1192pscg98
- SHA256 8f6c6d7f71069a79d5362abfcc41a8c8508f1766917ee9079b12e649694e800c
Score
8/10
Malware Config
Signatures
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Checks known Qemu files. 1 TTPs 1 IoCs
Checks for known Qemu files that exist on Android virtual device images.
- Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
- Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
- Reads the content of outgoing SMS messages. 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
dd.aS.dd.ss1⤵
- Removes its main activity from the application launcher
- Checks known Qemu files.
- Checks known Qemu pipes.
- Reads the content of SMS inbox messages.
- Reads the content of outgoing SMS messages.
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
-
dd.aS.dd.ss:rt1⤵