Analysis
-
max time kernel
52s -
max time network
46s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
20-10-2024 00:55
General
-
Target
tool.apk
-
Size
696KB
-
MD5
1191a942cc593071da75bd9d551c5fff
-
SHA1
fd138a0a41eeacebbc43bfd50ae315860e643f15
-
SHA256
2512b551758aa82edc38df3cabb050191ba71e27771a85cd9ee27ad7d0d8b531
-
SHA512
48d5dd6040d9e75df86d4b993392d55466f608b4ab9cbc4916f2cd0c08718ecc2c7559175fc1188d774fc614ae035df7d0f6404f64328576310e231f9451adcb
-
SSDEEP
12288:gJ/WU5GyF7rF/igUDXU4FMGDPK+dnHLsdgObAusT3cgtN0F7WA6Rq21YgWOtWDaO:gdD7rpQD3HxHLYdbAHT3SF7WAGNtSaO
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 8 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Performs UI accessibility actions on behalf of the user
- Queries the mobile country code (MCC)
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information