General
-
Target
ZIWELY.apk
-
Size
1.9MB
-
Sample
241009-x6qngawgjh
-
MD5
64a932240e284dade1a8b81e8a0fb1a4
-
SHA1
f7c8f62e4827e2670e9abcabd1d2781008dc2628
-
SHA256
b19bda1d1b12fc14a1d8c96fdb8624430c73218052dd871cb345ca85b365e881
-
SHA512
e57d1ff55a903a2960ff9a9a79238afa6ed45091ecd9b0ff4037be2eb6fe8799a67b4b8f6c378a9dffb18524e1bf22068983d9188cdfd08edc64e3ac5bf03243
-
SSDEEP
49152:qSYAkFR8MvFlsl4ND32ItPuRFpqVbeTTpl+Sz3:ZzUtFWl832ItPu5qVbw+Sz3
Behavioral task
behavioral1
Sample
ZIWELY.apk
Resource
android-33-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
ZIWELY.apk
-
Size
1.9MB
-
MD5
64a932240e284dade1a8b81e8a0fb1a4
-
SHA1
f7c8f62e4827e2670e9abcabd1d2781008dc2628
-
SHA256
b19bda1d1b12fc14a1d8c96fdb8624430c73218052dd871cb345ca85b365e881
-
SHA512
e57d1ff55a903a2960ff9a9a79238afa6ed45091ecd9b0ff4037be2eb6fe8799a67b4b8f6c378a9dffb18524e1bf22068983d9188cdfd08edc64e3ac5bf03243
-
SSDEEP
49152:qSYAkFR8MvFlsl4ND32ItPuRFpqVbeTTpl+Sz3:ZzUtFWl832ItPu5qVbw+Sz3
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.
-
Tries to add a device administrator.
-