Analysis
-
max time kernel
128s -
max time network
135s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
01-06-2024 23:03
General
-
Target
i.apk
-
Size
3.7MB
-
MD5
3b8ce99f1c395ed9384fdd1d0b096104
-
SHA1
7a4132b21003b1cc3cdf5a306cf956df87e7c978
-
SHA256
856e5326e78fafaa75bdbb550a680ad8e6eb88c67c477e09d6a45d9804eac7fa
-
SHA512
2548564dea13bff2d57b833733a2e2ea26f140675425ee6b54dbcd889b59962fd82f035117efc710bc02debaef5d3cdd4900ba145185dcdbe0d95861ad6e624e
-
SSDEEP
98304:XC6kUn6DX8C+Smco1FnrDJexQ1z7qsWgYoOWz4:0UnQs4wXUxQz7qujOWM
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Acquires the wake lock 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.inferiorly.bottlemaking1⤵
- Makes use of the framework's Accessibility service
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)