Analysis
-
max time kernel
138s -
max time network
152s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
08-10-2024 22:04
Static task
static1
Behavioral task
behavioral1
Sample
32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb.apk
-
Size
4.3MB
-
MD5
fe43d214683b4d270c75faa3ed3cfaa4
-
SHA1
3efb3d69053a9dc97bf111d82d76fc1c0adb17d7
-
SHA256
32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb
-
SHA512
b639dd2c22c95c66d0c262862714bc8a940fd3e61be5a1e0d365f41a01d20d59baeab419ae99594c68917ee4ccc733a921b092e8c28ab1bf1c121e5d2729c2db
-
SSDEEP
98304:ohARrMC3WHigvIVq6gLCrnUP41XRbKSCcBcyeJsvMQ0DPHn:AC3cIgBPUpliCMV
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground app.zbujko.iqyqpv -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.zbujko.iqyqpv -
Aborts a broadcast (usually for hiding system events from other apps) 1 TTPs 1 IoCs
description ioc Process Framework API call android.content.BroadcastReceiver.abortBroadcast app.zbujko.iqyqpv -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.zbujko.iqyqpv