Analysis
- max time kernel
156s - max time network
163s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
10/03/2024, 22:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
e2f9172cd719cb89542b9841ec3e80e93ce88318b11c7c185c0ec12b3106b8b7.apk
Resource
android-x86-arm-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
e2f9172cd719cb89542b9841ec3e80e93ce88318b11c7c185c0ec12b3106b8b7.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
e2f9172cd719cb89542b9841ec3e80e93ce88318b11c7c185c0ec12b3106b8b7.apk
Resource
android-x64-arm64-20240221-en
6 signatures
150 seconds
General
- Target e2f9172cd719cb89542b9841ec3e80e93ce88318b11c7c185c0ec12b3106b8b7.apk
- Size 28KB
- Sample240310-12csladb7s
- SHA256 e2f9172cd719cb89542b9841ec3e80e93ce88318b11c7c185c0ec12b3106b8b7
- MD5 05687f5e2de9bc4a4aff5ede0bf67a9e
- SHA1 4f427b5a03dfb53dded3143fe94fd5aa75639a34
- SHA512 a53fac0f8f901f74d71389554e89e1439fdf062e5a289ea8a37a3c9873d1d0be4dae299ec190d3e66f75bf02f3c4d5fd9d14e936a46fac9379fa026010624b47
- SSDEEP 768:aoTogowNAs4xXp8KKKugliCMXnfDQnMhrzAu/bp/Bvki:aodowNAhFp8KKKtITXLcsjh
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId org.show.van Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId org.show.van -
pid Process 5097 org.show.van - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.show.van - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal org.show.van