Analysis
-
max time kernel
47s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
05-10-2024 22:03
Static task
static1
Behavioral task
behavioral1
Sample
17689bb9b291c1761fb65f92459cf55f5cba16a3803abe53727435d1bb8b0e3a.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
17689bb9b291c1761fb65f92459cf55f5cba16a3803abe53727435d1bb8b0e3a.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
17689bb9b291c1761fb65f92459cf55f5cba16a3803abe53727435d1bb8b0e3a.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
17689bb9b291c1761fb65f92459cf55f5cba16a3803abe53727435d1bb8b0e3a.apk
-
Size
4.3MB
-
MD5
55be64343954b2b2e6aa864162c91419
-
SHA1
c49fe0481635b0132558afca20725c43b22117bc
-
SHA256
17689bb9b291c1761fb65f92459cf55f5cba16a3803abe53727435d1bb8b0e3a
-
SHA512
4e6060b490dbf9702e5d0ea6ab5cdeba9798556e6addd2174843bc69a2d0e81f912f8c96cce0dd45618af48390150de09abf404189f404952d9710e5047be59e
-
SSDEEP
98304:0hA/rMC3WHigvIVq3gLCrnUPu6K4CIC19yEIrX2W1U/2F+INS:+C3cIgIPBmvmEIrXre/c+INS
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground app.rmieik.uehrtv -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.rmieik.uehrtv -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS app.rmieik.uehrtv -
Aborts a broadcast (usually for hiding system events from other apps) 1 TTPs 1 IoCs
description ioc Process Framework API call android.content.BroadcastReceiver.abortBroadcast app.rmieik.uehrtv -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.rmieik.uehrtv
Processes
-
app.rmieik.uehrtv1⤵
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Aborts a broadcast (usually for hiding system events from other apps)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4272
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
949B
MD56b922a874c32a799f86f85234e64c755
SHA181a711f61920fb6f242c1365ba24aadb3447553a
SHA2566dddad89c7a1110696c06c319b45189abdb85f38de63b595a4e63d23e398b043
SHA5128caf3162bfe58bbdd11a6e09d383d2485af076de35340c98af538a8171c8f933f3d0dc17d33d8871d32eaa83e13ff3cdf3ea4a4da3f0aa74357d1060bada178c