Analysis
- max time kernel
150s - max time network
155s - platform
android_x86 - resource
android-x86-arm-20240221-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system - submitted
10/03/2024, 22:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
65dd5af22000cc16b8b24faeb7dfa2b17bdd2712bd8908b9b8eb31f4538fb97c.apk
Resource
android-x86-arm-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
65dd5af22000cc16b8b24faeb7dfa2b17bdd2712bd8908b9b8eb31f4538fb97c.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
65dd5af22000cc16b8b24faeb7dfa2b17bdd2712bd8908b9b8eb31f4538fb97c.apk
Resource
android-x64-arm64-20240221-en
6 signatures
150 seconds
General
- Target 65dd5af22000cc16b8b24faeb7dfa2b17bdd2712bd8908b9b8eb31f4538fb97c.apk
- Size 24KB
- Sample240310-12khfach39
- SHA256 65dd5af22000cc16b8b24faeb7dfa2b17bdd2712bd8908b9b8eb31f4538fb97c
- MD5 48b94a8724b4279608194eb042e94187
- SHA1 f6eb265999f30d9a44e4a3d4a7a0e8c97db880d1
- SHA512 67cc1ea01fd255e04abeebcda23789725cf4b6a96546927627f6a0a6f9949a687308bfa5aaea4f1a9da54ea942d4e628d6abe97f9f1ef2b37abdc6de1a5faf32
- SSDEEP 384:7O3qOuKGqEMZax3XAhNJ7ko0ZRmWDpK/cOVEOxXTIOuvGgY/i5Tp+5mpFtQ:ZOz7iAhNJYFXbpKcOVE6I/mX5
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId org.achievement.wisecrack Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId org.achievement.wisecrack -
pid Process 4184 org.achievement.wisecrack - Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS org.achievement.wisecrack - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock org.achievement.wisecrack - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal org.achievement.wisecrack