Analysis
-
max time kernel
126s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
19-05-2024 22:02
General
-
Target
6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4.apk
-
Size
3.9MB
-
MD5
fb4c92934dbb3c8b06893a391cfcc593
-
SHA1
ee4aef0276ca2060c316a51e284bccfdcd0236fa
-
SHA256
6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4
-
SHA512
8be46c9bb5787d068a653aaa901794a54e0b99a72dcd3153fc093475bde4f8e6b3b6acf91929af6265c8975c3f83d6509e4b6dc36490c2492b5c45e372c9d540
-
SSDEEP
98304:b4rXoGtpHajJeWisENxYO00wZ/Z4lNWmu4n:a3yeWixxY/PZ424n
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Prevents application removal 1 TTPs 1 IoCs
Application may abuse the framework's APIs to prevent removal.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Acquires the wake lock 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.hobits.euphorias1⤵
- Makes use of the framework's Accessibility service
- Prevents application removal
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)