Analysis
- max time kernel
149s - max time network
154s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
10/03/2024, 22:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
b0b088d48c2bc8ff4621d5e53cf1939b01fa3ee2cc10d5ab4a51691c0ae35822.apk
Resource
android-x86-arm-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0b088d48c2bc8ff4621d5e53cf1939b01fa3ee2cc10d5ab4a51691c0ae35822.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
b0b088d48c2bc8ff4621d5e53cf1939b01fa3ee2cc10d5ab4a51691c0ae35822.apk
Resource
android-x64-arm64-20240221-en
6 signatures
150 seconds
General
- Target b0b088d48c2bc8ff4621d5e53cf1939b01fa3ee2cc10d5ab4a51691c0ae35822.apk
- Size 24KB
- Sample240310-12hc3sch35
- SHA256 b0b088d48c2bc8ff4621d5e53cf1939b01fa3ee2cc10d5ab4a51691c0ae35822
- MD5 71598127a7ecb5d15725bb6e3c07547f
- SHA1 c2e865a6865560c73dc557eb040cb74a3e87808b
- SHA512 aeecd8508d988bd22e0185761cc1602f5c1c1220fbf3d322f52210e75e1e631eb63a2a192efd11414de36fc269f7e77a6fba4b3d23233eb1c7776a018f006075
- SSDEEP 768:nwbTrybgMs+YPhqjXU5CCeDAlIyFYKxTy/8mwhF:nwTuNs+YPhak5i8TZVv
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId ru.hall.genetic Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId ru.hall.genetic -
pid Process 5099 ru.hall.genetic - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ru.hall.genetic - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ru.hall.genetic