Analysis
-
max time kernel
14s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
20-06-2024 22:39
Behavioral task
behavioral1
Sample
acb7e1b095fa636c0491b484491a13b50974746e02fed40a395f1bc5775f3456.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
acb7e1b095fa636c0491b484491a13b50974746e02fed40a395f1bc5775f3456.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
acb7e1b095fa636c0491b484491a13b50974746e02fed40a395f1bc5775f3456.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
acb7e1b095fa636c0491b484491a13b50974746e02fed40a395f1bc5775f3456.apk
-
Size
2.5MB
-
MD5
c515996562bdb5741dee25bb31ef0e04
-
SHA1
04db93c064f7b0b1de9da12ddf08fc282c40f10a
-
SHA256
acb7e1b095fa636c0491b484491a13b50974746e02fed40a395f1bc5775f3456
-
SHA512
cb06b31467df8a4b3a27c111006f00326be12bc14bd79c1054a1d8065c07276d74321f91c6d42c05956051a2084b38a128ebde6be40b1bb6e82d804b9606db27
-
SSDEEP
49152:IoxhlAv2sRoL2JmzGYNlTOCDDw0yQDh5+8ujDrgBMSwgg/ks:IqAv2sRoLtzXXN3wW+8ujD4MSbs
Malware Config
Signatures
-
pid Process 4193 com.payuhafetafa.fewe -
Performs UI accessibility actions on behalf of the user 1 TTPs 5 IoCs
Application may abuse the accessibility service to prevent their removal.
ioc Process android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.payuhafetafa.fewe android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.payuhafetafa.fewe android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.payuhafetafa.fewe android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.payuhafetafa.fewe android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.payuhafetafa.fewe -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.payuhafetafa.fewe