Analysis
-
max time kernel
141s -
max time network
153s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
-
submitted
09-10-2024 19:28
General
-
Target
ZIWELY.apk
-
Size
1.9MB
-
MD5
64a932240e284dade1a8b81e8a0fb1a4
-
SHA1
f7c8f62e4827e2670e9abcabd1d2781008dc2628
-
SHA256
b19bda1d1b12fc14a1d8c96fdb8624430c73218052dd871cb345ca85b365e881
-
SHA512
e57d1ff55a903a2960ff9a9a79238afa6ed45091ecd9b0ff4037be2eb6fe8799a67b4b8f6c378a9dffb18524e1bf22068983d9188cdfd08edc64e3ac5bf03243
-
SSDEEP
49152:qSYAkFR8MvFlsl4ND32ItPuRFpqVbeTTpl+Sz3:ZzUtFWl832ItPu5qVbw+Sz3
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
com.example.dat.a8andoserverx1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.