Analysis
-
max time kernel
12s -
max time network
146s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
17-09-2024 02:12
General
-
Target
8651b7d7bee00f17fc9c6e0e65563c9b491e81edbde8c479bde6ec1ddc960d15.apk
-
Size
2.0MB
-
MD5
a3ff7ca693095014914f3ae37f05ac28
-
SHA1
df519db5d0441db91881fc701faff240637ed6c5
-
SHA256
8651b7d7bee00f17fc9c6e0e65563c9b491e81edbde8c479bde6ec1ddc960d15
-
SHA512
ee01d2452d4741f2813b244e27cd8c94d17e9d5a9105694725556cd0c26ca2ffa10f8f087cbf9aded4427d738b8ff8fdb8c23b5f507b7d16ecf712ab2410d6e3
-
SSDEEP
49152:XrDrfuUFQWjF6ICtCbcj4ZtRxBnH4ZFm7Tpl0:XrDrHQUF6IPbccnRxN4ZFg0
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
com.example.dat.a8andoserverx1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Tries to add a device administrator.