Analysis
-
max time kernel
163s -
max time network
168s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
30-07-2024 09:52
Behavioral task
behavioral1
Sample
AKESSC.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
AKESSC.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
AKESSC.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
AKESSC.apk
-
Size
1.9MB
-
MD5
0eb10dc4793b194423d60cb708952087
-
SHA1
01d2e0ae0dba316cd313f7b8581063342a12cf43
-
SHA256
3f3d1ce1e9bf5dfdf93295f0ada92c3d3c60afc0b6cad155c7cb0acc4676756d
-
SHA512
0f5add0e1289a271d008b28d2d6120b443847ebcceb123ab7e1f60ad65c9b5d61b93be89f266f1ee341c463b0ab0123d433b4eecbe1c1bee55f4a4ed4f65cc37
-
SSDEEP
49152:xcwb+vagkIuLtGBi6TQslaUYQFNQqJ7UGlTplA:GwKvnkx8BzplaRQFPJ7UGA
Malware Config
Signatures
-
Processes:
com.example.dat.a8andoserverxpid process 4213 com.example.dat.a8andoserverx -
Acquires the wake lock 1 IoCs
Processes:
com.example.dat.a8andoserverxdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.example.dat.a8andoserverx -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.example.dat.a8andoserverxdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.example.dat.a8andoserverx -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.example.dat.a8andoserverxdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.dat.a8andoserverx -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes:
com.example.dat.a8andoserverxdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.example.dat.a8andoserverx -
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes:
com.example.dat.a8andoserverxdescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN com.example.dat.a8andoserverx
Processes
-
com.example.dat.a8andoserverx1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Tries to add a device administrator.
PID:4213