Analysis
- max time kernel
176s - max time network
182s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
- submitted
08/06/2024, 21:42
General
- Target VirusShare_d9a91a7f674d6f332deac024b0084c5f.apk
- Size 73KB
- Sample240608-1kvbbagg5x
- SHA256 14caec9b011946b73947cefc1819bb2fbea1324af82edf6758de2707d7f49932
Score
7/10
Malware Config
Signatures
- Reads the content of the call log. 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Tries to add a device administrator. 2 TTPs 1 IoCs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.ayurvedic1⤵
- Reads the content of the call log.
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1