Analysis

  • max time kernel
    179s
  • max time network
    178s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    19-07-2024 13:37

General

  • Target

    ready.apk

  • Size

    9.3MB

  • MD5

    580222efdce1dca72c8402f3da095983

  • SHA1

    37867faf2c1f88c7bde0a96dc382e962ceec93ac

  • SHA256

    5b491059221e92e592326a582f84e416e623c7b5c9da6393340176d0f76df9da

  • SHA512

    7febef3134a22dc910ff2d3ba9400a316e1e9e48ec2ce1b79497c87c086994713d2951579987286a18b0563e9ff5b2ffb0951a516047aed04da8ec02a832516d

  • SSDEEP

    98304:nYZgoDdDHQvubBsPp6nfxg6lreKmzjzBRTE0tMTVa:YjDdzrVJiXlzv3z

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • um.tahoe.broker
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Schedules tasks to execute at a specified time
    PID:4350

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads