Analysis
-
max time kernel
179s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
09/08/2024, 22:13
General
-
Target
10edb8fa4af80c922d4d6d5beab51ad3e5574db59a47b9cc68ccd3c17435cb77.apk
-
Size
206KB
-
MD5
ad087782941d94738e17e1950a30a573
-
SHA1
983cc332e48eb0bf51e4e89844d16cc376ccc6bd
-
SHA256
10edb8fa4af80c922d4d6d5beab51ad3e5574db59a47b9cc68ccd3c17435cb77
-
SHA512
fd50ec1a2a40f484a959b1ef3db90828574e912dbb45f15f76ecbd73f0d8d301eefac8b01b398336002c94d273564821afa0b7b7cf3b3a6fddab27e47737d303
-
SSDEEP
6144:GwWVGzC6kC4eB7zG2V5CE8S39QxbYAWhb:GG1DCE8k9QxbYxhb
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
org.article.dragon1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Schedules tasks to execute at a specified time