Analysis
- max time kernel
149s - max time network
156s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
10/03/2024, 22:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
d526f57b68b8a221a093109664cc41c5b03ca0ed8d4c2ae915414852c004535c.apk
Resource
android-x86-arm-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
d526f57b68b8a221a093109664cc41c5b03ca0ed8d4c2ae915414852c004535c.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
d526f57b68b8a221a093109664cc41c5b03ca0ed8d4c2ae915414852c004535c.apk
Resource
android-x64-arm64-20240221-en
6 signatures
150 seconds
General
- Target d526f57b68b8a221a093109664cc41c5b03ca0ed8d4c2ae915414852c004535c.apk
- Size 24KB
- Sample240310-12leqsdb8t
- SHA256 d526f57b68b8a221a093109664cc41c5b03ca0ed8d4c2ae915414852c004535c
- MD5 bcec5a7ec4e8c469b62368a73d550208
- SHA1 c3e24a9acd61c2bad9b564e60e58c8ce12958667
- SHA512 1eaff8a500310ae715ea8d5fcc402d773a370513dc234a95540d5e28b726d32e2a03cf050e54354bd275c200bcfa6fee8a08287284a8c0bb6da036f2037fd1c3
- SSDEEP 384:tflll543cjxr/1kMGfrcFpMUxXTIUuYGgYA8xpxxpD7o:t9l3Dx/QTc/N7/h8Fo
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Makes use of the framework's Accessibility service 2 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.god.voucher Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.god.voucher -
pid Process 5006 com.god.voucher - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.god.voucher - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.god.voucher