Analysis
- max time kernel
157s - max time network
165s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
04/08/2024, 22:09
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.apk
Resource
android-x86-arm-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.apk
Resource
android-x64-20240624-en
5 signatures
150 seconds
General
- Target c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c.apk
- Size 136KB
- Sample240804-124lbaxgnp
- SHA256 c3cd96bfad61dad8b6fb2ba016f1eecd5be68c6ce15e8a16f3f90c9dae358c1c
- MD5 80313d90929a608d2736fd9347c51f1e
- SHA1 a9045b948e4f0c782b830b5552f5a598f15a893b
- SHA512 87cf25337ff1a16497087094bedfb24164dd184c7e6025ba2bcdc6855c7204e1c8d328f43b92ef495c1957258646ef88c095771a67c4f3f0565882be040ac02a
- SSDEEP 3072:HE6P0dBd6PBwuagMneRLDeUBJVLCAaZaaLHoKIG9rG2LjInisUzeD:DP0dK6uaPnYLDeUBJRDaZaaN/9rG2LMl
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4962 ru.lesson.destruction - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ru.lesson.destruction - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground ru.lesson.destruction - Reads information about phone network operator. 1 TTPs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule ru.lesson.destruction