Analysis

  • max time kernel
    159s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    09/08/2024, 22:13

General

  • Target
    fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81.apk
  • Size 205KB
  • Sample240809-145ama1hrl
  • SHA256 fc547cd0be79cfccf8fa9f96828e39455e84210664cf12e846352059ee762a81
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.normal.split
    1⤵
    • Removes its main activity from the application launcher
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Schedules tasks to execute at a specified time
    PID:4302

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads