Analysis
- max time kernel
170s - max time network
176s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
14/08/2024, 22:50
Behavioral task
behavioral1
Sample
9fed52ee7312e217bd10d6a156c8b988.apk
Resource
android-x86-arm-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9fed52ee7312e217bd10d6a156c8b988.apk
Resource
android-x64-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
9fed52ee7312e217bd10d6a156c8b988.apk
Resource
android-x64-arm64-20240624-en
4 signatures
150 seconds
General
- Target 9fed52ee7312e217bd10d6a156c8b988.apk
- Size 1.7MB
- Sample240814-2sl6cavdrr
- SHA256 6ac2fadf96fb423f7c22521fcb106e44343d26c8d682e8b5a460cdf8388b2178
- MD5 9fed52ee7312e217bd10d6a156c8b988
- SHA1 3e23c0d93b51e06918c69b138ef5fbeb921c9f95
- SHA512 dfd8dc7d623d2c142cbe11473324f34250115fb3c7e08a6b60f319ac9f419aa5301f3e042a525639398c54cfe3f1175426af09732cbb05932e4487baa91f5f4d
- SSDEEP 24576:0ZCqpP9JH/VoVPvQrHs7zOSKHynup2usCAdYvgK5zT2y6HvCVMjny9L5hX/zqrI:0ZxxVopuHsOltFgg6abvX/zuI
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
-
pid Process 4960 com.example.dat.a8andoserverx - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.example.dat.a8andoserverx - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.example.dat.a8andoserverx - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.dat.a8andoserverx