Analysis
- max time kernel
149s - max time network
156s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
10/03/2024, 22:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
f88709fe08b8b90e20cf27701f53ecba2cbfb4371d1e6f3e8295df7f3b3cd90d.apk
Resource
android-x86-arm-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
f88709fe08b8b90e20cf27701f53ecba2cbfb4371d1e6f3e8295df7f3b3cd90d.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
f88709fe08b8b90e20cf27701f53ecba2cbfb4371d1e6f3e8295df7f3b3cd90d.apk
Resource
android-x64-arm64-20240221-en
6 signatures
150 seconds
General
- Target f88709fe08b8b90e20cf27701f53ecba2cbfb4371d1e6f3e8295df7f3b3cd90d.apk
- Size 24KB
- Sample240310-12e8qach29
- SHA256 f88709fe08b8b90e20cf27701f53ecba2cbfb4371d1e6f3e8295df7f3b3cd90d
- MD5 178a8ccc54dbabd562d809709a8e73e2
- SHA1 34ea8b867b1046de433cacce71e6ad216c0b63de
- SHA512 455b72588213eb12574a3acd36807be006f7c89a0430a8f4a9c4c67b0a3ae2d77776529cc4dbf2627b0f1fbf2df0ca50915cbcea5d4a831f0153aef430aa2f7f
- SSDEEP 384:g31H0IBBfBsCifl4cjp4a0mI/H/Or+XIui0EpXBtnu3jXGgYafpVUqYpKO:AOKBJLKpsn/H/OrEVi3p/nQj/HIx
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId ru.grandmother.hard Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId ru.grandmother.hard -
pid Process 5052 ru.grandmother.hard - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ru.grandmother.hard - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ru.grandmother.hard