61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3

Analysis

max time kernel
12s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
12-06-2024 13:52

Target

61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3.apk
Size

2.2MB
MD5

0e41cc88ddb58e054719cb24cda889a3
SHA1

9c52fb47e349d05191c7bff8324d977151564f04
SHA256

61a050409d1860b218b94ecb8c6c1b2c5fac9f320182d23371d94bd15488d1a3
SHA512

b9457ab79fe1017c91d39bff425895d7dcad95c2347e9e084758878eff0baef9b438718be460c16e5266dab27d05daa0a12877892565a9f61664a5332a111cd3
SSDEEP

49152:a6bXXlu1BWV9RWl30J1NutbDS78LMaq5Skg8MzfrypB6A:V7ECvWlkrN+bDhLFWqzfryp4A

Score

7^/10

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

com.perl.gql

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.perl.gql

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.perl.gql

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.perl.gql

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.perl.gql

com.perl.gql
1⤵
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4272