Analysis
-
max time kernel
126s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
12-10-2024 22:00
General
-
Target
up.apk
-
Size
3.9MB
-
MD5
87cf8984bcfd7334497097b1d301f309
-
SHA1
98f2baf2d2734b794b818b3d2cc4a6b88ef62a0c
-
SHA256
6bef075c85d2632402040db9af671ff339fcd57be5cb068624162b721f304def
-
SHA512
13c98ae4c3ad2c263aeeb089628411b2b1183f753f7f0cb02c9fb934d74ea16239775bdfe9bcab3b5ad3a8c77fdc95e7c51e426937aa0ba59153f2fda197ce56
-
SSDEEP
98304:75MwrNbdBPMFPBE60g4BBLoaVm1jTwMmgrXg6t:7e2zUZC6h4jVmZ0g86t
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.demonland.safranin1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Uses Crypto APIs (Might try to encrypt user data)