Analysis
- max time kernel
88s - max time network
155s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
11/03/2024, 11:44
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1ca09c7a67a02d182c8a23a97a651228.apk
Resource
android-x86-arm-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ca09c7a67a02d182c8a23a97a651228.apk
Resource
android-x64-20240221-en
5 signatures
150 seconds
General
- Target 1ca09c7a67a02d182c8a23a97a651228.apk
- Size 65KB
- Sample240311-nwct7abb9v
- SHA256 3e0c796d3d9acf160a64aecceec2d5a794e6e6ec96b3a73297f634e017975d30
- MD5 1ca09c7a67a02d182c8a23a97a651228
- SHA1 8617ed9208901cd52550eec055c7829d64217264
- SHA512 1c594f9f2409c400b76aa62699dc2631e4789d3b3a419d15920ce501ba89bf697c9e443fcafad4ff96ea0912a86b630a39438871bebf2f07aae6c7361720a8c9
- SSDEEP 1536:XKtOlCsQcZQ2nrqzKIxjq8ID0AtnMd/5cx:X7CszVrqzfjqHDBaV2
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications dd.aS.dd.ssdfgfdgd -
pid Process 5017 dd.aS.dd.ssdfgfdgd - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock dd.aS.dd.ssdfgfdgd - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal dd.aS.dd.ssdfgfdgd