Analysis
- max time kernel
7s - max time network
130s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system - submitted
10/06/2024, 01:47
Static task
static1
Behavioral task
behavioral1
Sample
GKv6.2.1_ByRichardGames.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
GKv6.2.1_ByRichardGames.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral3
Sample
injectEvent16.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
injectEvent16.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral5
Sample
injectEvent16.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral6
Sample
main.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral7
Sample
main.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral8
Sample
main.apk
Resource
android-x64-arm64-20240603-en
General
- Target GKv6.2.1_ByRichardGames.apk
- Size 404KB
- Sample240610-b7snkaad2x
- SHA256 2ded2d60e9093e3a940572d017720a46567bf6e16c47e34032aed01ad32934c1
- MD5 5a103b32d7c2a1fcf4ee160ac6c38f9a
- SHA1 b22e7423589b3830d1defd3041b6b1c04927f659
- SHA512 42156ec1b578412133a6c41127c73ebf8b9a87c935c9a835cf494e0368137c152eddb0672648dc11df5917d4f07a256ff66b780fb7cf36374a42fbd4f152fba9
- SSDEEP 12288:Keq3d+RguyRFRwMfgn0SqoTHvnVA7V/YgjGiG3j:+kSBf1oTHvnVA7VQg9K
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.locnet.gamekeyboard2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.locnet.gamekeyboard2