Analysis
- max time kernel
170s - max time network
134s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
09/08/2024, 22:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
142d34eee19eb3bd0dfdff4c6cf1bd56129c12666f33096379ec8ead12cfdd96.apk
Resource
android-x86-arm-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
142d34eee19eb3bd0dfdff4c6cf1bd56129c12666f33096379ec8ead12cfdd96.apk
Resource
android-x64-20240624-en
5 signatures
150 seconds
General
- Target 142d34eee19eb3bd0dfdff4c6cf1bd56129c12666f33096379ec8ead12cfdd96.apk
- Size 206KB
- Sample240809-147qrawbnc
- SHA256 142d34eee19eb3bd0dfdff4c6cf1bd56129c12666f33096379ec8ead12cfdd96
- MD5 e49de100f5956f03e47866771ae8e757
- SHA1 0a99e72b75bc6bbfd259f2be0c7946b0c5c9ec00
- SHA512 b34e27597925452b33d440f9c3918d014e62e1ddf6ba1a8d5477ca42ad4ca4be156d2c7fa339af40459f1bd769daf510cf76c7590229e02297a78f604e2d2fc7
- SSDEEP 3072:TIuZwDEmmKsQq9DKXa7WeWy/tDXmwlIu3jBZAka/34Q27XPu9T6C8B99IMHBE38r:8JEd2Xa7jDXmnuTfxaP4n7gX8EMr
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4419 com.find.father - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.find.father - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.find.father - Reads information about phone network operator. 1 TTPs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.find.father