Analysis
-
max time kernel
44s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240603-en -
resource tags
-
submitted
08-06-2024 17:23
General
-
Target
VirusShare_fc5ee8cf3271e11261382dfc862d7018.apk
-
Size
36KB
-
MD5
fc5ee8cf3271e11261382dfc862d7018
-
SHA1
1b9b670c342b2cb25a22f49a05b85971772a67bb
-
SHA256
aaa2a295d3724475e8a092f11cc2546d0e859bbdd7fdf9ea11a689abdb113a33
-
SHA512
96f1d943d67bcc13499eb80159f2c69d692c225792fb94a1e299459fa0f7913d083a5304ddbbd82a4a5743c18c8358a0b529a060d8337ace10d833e0dc971db1
-
SSDEEP
768:M3i4rODFAJsW6W/hGGR5gXwzemv4xummb9QctueuN9v37jox:eixIG2gXWeA4MActupnnc
Score
7/10
Malware Config
Signatures
-
Reads the content of the call log. 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
de.cocaine.detonations1⤵
- Reads the content of the call log.
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information