General
-
Target
bfc71fa8f865d6c05c02f4b94c8df31368abfa099f640bccafaba7c802ac3c78.apk
-
Size
9.5MB
-
Sample
240515-b8gmpabc6x
-
MD5
116e803e46bf16f43840c4c6a9e22390
-
SHA1
bd5327098de0abeea6dbbb9889631e17e655488d
-
SHA256
bfc71fa8f865d6c05c02f4b94c8df31368abfa099f640bccafaba7c802ac3c78
-
SHA512
aa1a98203f77a9e3c9f63415b5460b2a26586b89d3a1f803a8eb4afbe1f44302abdb1578f7ee1fbb732b99ded0c0a8bf2173c938efb3146ce3801b4a892cab19
-
SSDEEP
98304:dsdsCCjEgZNh/vmrc8yioDt4Cmz7zBHT/0tctbM9:dSEEebOLat4tzdwYG
Malware Config
Targets
-
-
Target
bfc71fa8f865d6c05c02f4b94c8df31368abfa099f640bccafaba7c802ac3c78.apk
-
Size
9.5MB
-
MD5
116e803e46bf16f43840c4c6a9e22390
-
SHA1
bd5327098de0abeea6dbbb9889631e17e655488d
-
SHA256
bfc71fa8f865d6c05c02f4b94c8df31368abfa099f640bccafaba7c802ac3c78
-
SHA512
aa1a98203f77a9e3c9f63415b5460b2a26586b89d3a1f803a8eb4afbe1f44302abdb1578f7ee1fbb732b99ded0c0a8bf2173c938efb3146ce3801b4a892cab19
-
SSDEEP
98304:dsdsCCjEgZNh/vmrc8yioDt4Cmz7zBHT/0tctbM9:dSEEebOLat4tzdwYG
Score8/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-