Analysis
-
max time kernel
1796s -
max time network
1798s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
-
submitted
12-09-2024 20:43
General
-
Target
AJGIZU.apk
-
Size
2.8MB
-
MD5
44be87a9d995de4dd012b0cd03f47bb0
-
SHA1
d037dd795cbadc318a9eb6c0a243d72025712a61
-
SHA256
1e9229bd17bb55be2efe1934f99298beb198f65f76dc957ab3a751cb69d50671
-
SHA512
982fa879d7a0c784b2077505771da9e1645080de34ba788224789878443e8083f117768b06427e98afddc5a814dc8b61247e9aebc4b9337ba890f5f941697e40
-
SSDEEP
49152:ebmGscmts7UKs4FGJXJpEsx+iQQG4LT52xB5VPI/+rbfVVUrbiPEVVETplA:eyGsco+FMXJhxTGgTwnPa+tWCP+6A
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
com.example.dat.a8andoserverx1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.