Analysis
-
max time kernel
122s -
max time network
154s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
05-09-2024 22:00
General
-
Target
e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.apk
-
Size
3.9MB
-
MD5
8b83ff50b4b15eefe846ec24e750091c
-
SHA1
fe59eb92b1a27f7a7a64f6d319e38e5ef8b596d5
-
SHA256
e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb
-
SHA512
d1fa9aa27d2209bc42967c0dd669d8f651bc8d7ba5285bd090536f7da9e320d73297a36ba2acf4e8da227f09e226c07348d9337357d0d2accedafa3fb3b179e2
-
SSDEEP
49152:Y3gHkefQN3R/bq6ZqOO2zuH7k4gX1qw/B4qNby02RxFgBML+t9g1/ynPDWFQi9kb:sgHfINBlZqGzw7kFFKJgiLG98yPDG0
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.millikan.rosel1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Uses Crypto APIs (Might try to encrypt user data)