Analysis
- max time kernel
126s - max time network
136s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
01/06/2024, 22:53
Behavioral task
behavioral1
Sample
594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.apk
Resource
android-x64-20240514-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.apk
Resource
android-x64-arm64-20240514-en
4 signatures
150 seconds
General
- Target 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d.apk
- Size 3.7MB
- Sample240601-2t1ecsac76
- SHA256 594d6694bf83657b974cc4ac6c6fbec14c84680f343d7547f000423dbd5f957d
- MD5 f8540764ac58575f150cc992ad241a5d
- SHA1 eccc50efe5dd4d494b572433a39efa08d8092482
- SHA512 1ac4e29275a3aa70990c26973333e36b5d62b22ca854642fc8295a36f8a9f0e8dcc0cb9ae372f0c49c3b715516af4eefc0bbba87d9bbb22ba59f72f2e0f8f2a9
- SSDEEP 98304:ry/wVk+PJgvJQ4boVqLcIJVryNaalQ1szWsUxJ:ry/8YU2PryrJKsUT
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.backstay.miscommunicate - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.backstay.miscommunicate - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.backstay.miscommunicate