Analysis
-
max time kernel
78s -
max time network
82s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
20-05-2024 12:57
Static task
static1
Behavioral task
behavioral1
Sample
0b70579437d83e4338c8a37b12b049d864a353d2884b04e7b062d37a4f371242.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
0b70579437d83e4338c8a37b12b049d864a353d2884b04e7b062d37a4f371242.apk
Resource
android-x64-20240514-en
General
-
Target
0b70579437d83e4338c8a37b12b049d864a353d2884b04e7b062d37a4f371242.apk
-
Size
79KB
-
MD5
59618633051edb09bc18f250d0d2d038
-
SHA1
29a032e8224becb091861165125338445d4697c6
-
SHA256
0b70579437d83e4338c8a37b12b049d864a353d2884b04e7b062d37a4f371242
-
SHA512
c9da070c26be91cf9c8d3be096949265305fe4043085436de84a5b0043e21ff7a7cfe5c904121e5af12a81724591a1f7c4d2df20c5842769d4cc50d4112cde66
-
SSDEEP
1536:JvVGigxYQZcTPR9KWfxM8zFOsv55FS3imCbowdfpsdOC7bATo1oKga:2xdmTPDNwGe3imyBdxs0C7gYr
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
anu_bifuulro.appdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone anu_bifuulro.app -
Acquires the wake lock 1 IoCs
Processes:
anu_bifuulro.appdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock anu_bifuulro.app -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
anu_bifuulro.appdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo anu_bifuulro.app -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
anu_bifuulro.appdescription ioc process Framework API call javax.crypto.Cipher.doFinal anu_bifuulro.app