Analysis

  • max time kernel
    3s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    10-07-2024 11:17

General

  • Target

    ioboti.apk

  • Size

    784KB

  • MD5

    776e2e37bff43c52c4afbe296be6e9b8

  • SHA1

    3d97124f5258b6cd708922dfb0ffb471c288c680

  • SHA256

    094d9d8200af167e65c1270bb9ef081b3de3c4b33bf830f64f6bbacbcd134f13

  • SHA512

    6001f4ffcb7b1bbf778603490ed24e13da52c2ce2dce1f6052132293d55c80d2b1f5862059bf6a434d03e02592999badc28d1af9916efdf2985c423d9c050b35

  • SSDEEP

    24576:X7isHIz5v7bQ3bxx8pEVG/jEjmENyf8srz:Esbxx8pEkbEjmI0

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • com.kt.falcon
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    PID:4349

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kt.falcon/files/classes.dex

    Filesize

    46KB

    MD5

    3264a2982c4a4d802da794df32ad8a96

    SHA1

    5ad929dbea2771ff992ac36d7535d884c0940c11

    SHA256

    06e0925ed279be1b00fc82b501ff42ff614048ec84d33d49cb0f6a88184fde84

    SHA512

    ef1527738506f8e13bdcafe95f9c8945f6376e066745242d827571eb05f4fea3255a0aee4921fcfca49f890b4f61f7464a30c5ee04f598fac62ec860d68dc453