Analysis
-
max time kernel
125s -
max time network
158s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
27-08-2024 22:00
Behavioral task
behavioral1
Sample
bd9e611efebb551cd7047d8634939d715fb14adaa1ce17a6078ac322b282fd2f.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
bd9e611efebb551cd7047d8634939d715fb14adaa1ce17a6078ac322b282fd2f.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
bd9e611efebb551cd7047d8634939d715fb14adaa1ce17a6078ac322b282fd2f.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
bd9e611efebb551cd7047d8634939d715fb14adaa1ce17a6078ac322b282fd2f.apk
-
Size
3.9MB
-
MD5
c0c8fd4eec5c14104ef5c9ef4c488a3c
-
SHA1
7d489deb6363017ae7b8039b7f97da6bc2174838
-
SHA256
bd9e611efebb551cd7047d8634939d715fb14adaa1ce17a6078ac322b282fd2f
-
SHA512
3597c5e74b052a306771bd566eafb16dda7d0b31d2cbb458cce0cedb77cd14c6f82abf60d5158f0dbb28eb456dbcad7f434a6115855dec57f922dcc9a2c3167c
-
SSDEEP
98304:u3a9Fe7nRvwPvfQho5cuVM5N2uOCUgstXRQzkFfSvNgqDz2fb:uqO1PaCuVM/GtRFfigo2fb
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
com.semiconceal.wimpledescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.semiconceal.wimple -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.semiconceal.wimpledescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.semiconceal.wimple -
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
Processes:
com.semiconceal.wimpleioc process android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.semiconceal.wimple -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.semiconceal.wimpledescription ioc process Framework API call javax.crypto.Cipher.doFinal com.semiconceal.wimple