Analysis
- max time kernel
127s - max time network
146s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
- submitted
10/03/2024, 22:06
General
- Target bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2.apk
- Size 398KB
- Sample240310-11a8dacg59
- SHA256 bcccfa38ee36676d78d9a996c7da6ac30cba6f199d47200b2e8614c0093fb6d2
Score
8/10
Malware Config
Signatures
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Checks known Qemu files. 1 TTPs 1 IoCs
Checks for known Qemu files that exist on Android virtual device images.
- Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
- Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
- Reads the content of outgoing SMS messages. 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
dd.aS.us.dd1⤵
- Removes its main activity from the application launcher
- Checks known Qemu files.
- Checks known Qemu pipes.
- Reads the content of SMS inbox messages.
- Reads the content of outgoing SMS messages.
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
-
dd.aS.us.dd:rt1⤵