Analysis
-
max time kernel
12s -
max time network
70s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
27-04-2024 04:12
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral5
Sample
client.apk
Resource
android-x86-arm-20240221-en
General
-
Target
client.apk
-
Size
807KB
-
MD5
c91b968b11bb2ac894739c48d7ca9aad
-
SHA1
7e5ade3831be1a3eb03bcc8d0abdb407118379b2
-
SHA256
ea9d481ce2c87fb6190d69533cddac9704800842a33465aab1186419440b2f15
-
SHA512
97e25b68a205a80cd1fb31a32ecc872e6c475a60f4b81c36b37eb2a5c57dcfbc9023f40bba442e531ce7deb3afe4ade4998baba1aec0e981aa2beb5892dc0e9c
-
SSDEEP
12288:OGPRulAkACIrK7Z0C9HDrdvhj3KGLaD26C9XgqRCIlNE8Z6GvhZT:rQp7IrKuC9HdvhjKeaDnG5Zv
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
yps.eton.applicationdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground yps.eton.application