d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da

Analysis

max time kernel
12s
max time network
159s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
14-06-2024 00:44

Target

d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da.apk
Size

2.2MB
MD5

d9ae1e792a50a049a223cd57ae16d0c2
SHA1

8248884c036e719e2ff14718f95b040763011d9d
SHA256

d8c67a6df2dc3802139dc35f15a8e9adaeb6d3136e589690c729bc7cdf9264da
SHA512

3efd4b4657694d87e11b9fc71e80364b2a6f2932f6424a51a6923956d66d76e8869b2db9189ba8b95d883ef196dfe51db2e389196c3855aaa61dfefaea86fa18
SSDEEP

49152:WDvjprJAN13nqKf5AOitoCH/KOksG+Cv851MTvu4Bg8vHfrbhIv:WzjM/jFitoCHfn8voOHHfrbhIv

Score

7^/10

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

Processes:

com.perl.gqn

description	ioc	process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.perl.gqn

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.perl.gqn

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.perl.gqn

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.perl.gqn

com.perl.gqn
1⤵
- Makes use of the framework's Accessibility service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4315