Analysis
-
max time kernel
125s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
07-08-2024 22:00
General
-
Target
up.apk
-
Size
3.9MB
-
MD5
a990292c7557abae3d78c27945d10e85
-
SHA1
4f17fe329dd74adb655b04ffba6cd709b2c7d982
-
SHA256
3490d163cafc8e2762feaa7c9325a684c2bc509ea88f0805862db59159010857
-
SHA512
bae90131be8e36dfcac542e3955b2f95b42c93f679c118db9d8ad365390840270a99aeb8b4484033329a8d12acaade4a32bfc01ec25cd850116176517be708a6
-
SSDEEP
49152:ehfbzsIoMs9qDXArwjjFIS54WSc3CcqL1P0X4vFzjBBIuPcsuR1EFmFQ/LnfwI0V:eZb5oMoxrwFISmAc7vVtPcn1MmwLfwqQ
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.automatous.bensel1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Uses Crypto APIs (Might try to encrypt user data)