Analysis
- max time kernel
159s - max time network
139s - platform
android_x86 - resource
android-x86-arm-20240624-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system - submitted
09/08/2024, 22:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81.apk
Resource
android-x86-arm-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81.apk
Resource
android-x64-20240624-en
0 signatures
150 seconds
General
- Target fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81.apk
- Size 205KB
- Sample240809-145ama1hrl
- SHA256 fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81
- MD5 c3ffd7e6d04fba1f22ff38c3a050c478
- SHA1 58b6943b6890b217647e554751f387751ca4c0c6
- SHA512 7d2efee8b6155feee9ef9fd886219a1fcd6b61f2da3665696e8795e998a3ea72df4299ca687b49286a1ff0daa53cd686cfe02b96c813cdce14cb19b8fa4cf6ee
- SSDEEP 6144:qvw2iJ2pFfQCHxOi3oVuDzmnt7lsa7v3+lB8rH7Crfi6zXbHxr:XJKxX4Eent7lsa7v3+l87olXbRr
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4302 com.normal.split - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.normal.split - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.normal.split - Reads information about phone network operator. 1 TTPs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.normal.split