Analysis
-
max time kernel
12s -
max time network
168s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
21-05-2024 22:03
Static task
static1
Behavioral task
behavioral1
Sample
81b13d0393d91ea8450646c1f1e26863d6b8768432fedb1da52cebcba73fcae6.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
81b13d0393d91ea8450646c1f1e26863d6b8768432fedb1da52cebcba73fcae6.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
81b13d0393d91ea8450646c1f1e26863d6b8768432fedb1da52cebcba73fcae6.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
81b13d0393d91ea8450646c1f1e26863d6b8768432fedb1da52cebcba73fcae6.apk
-
Size
2.2MB
-
MD5
1bc760856748543084fec8a69bfc6034
-
SHA1
f4397c946c38937f84bbc9c3aa500848c2343b4e
-
SHA256
81b13d0393d91ea8450646c1f1e26863d6b8768432fedb1da52cebcba73fcae6
-
SHA512
4f165897c76c242d88a5c89d11c144072a854af095130b69190241a3c21f780a0b880b470e3efdb4d801e44b7d57d26756a3784abc173e6c5abd7f0bc4ff74cd
-
SSDEEP
49152:0el+N6pbHGt8n6ur6qN0J1NutbDS78LMaq5Sgg83zfryp7:0el6abmt8n6ururN+bDhLFWJzfryp7
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.perl.gpj -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.perl.gpj