Analysis
-
max time kernel
145s -
max time network
153s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
01-11-2024 12:16
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
ready.apk
-
Size
29KB
-
MD5
5e2d6a7c8bdee0f83c623afd72cf408e
-
SHA1
98061a731f70f35c0e209696e5dc69232d20dc47
-
SHA256
d832569f4bef206d50e2a2719312826d65ef7b95da9b008989b5d591195f9799
-
SHA512
f917a43e62f324e610ecd16446e46623680330911e455427f8985aa14dadfd24a6da9a0e7ccad15dbe288c276943e7fe24429ed800e6a476cd109977fdb26949
-
SSDEEP
768:g1qu/ssH/ZEqynEUsoKivy+apcKE85o0saXT10LOSgLud:XAssf+qyEEha+Aa820saDukq
Malware Config
Signatures
-
pid Process 4225 four.pda.suffix -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground four.pda.suffix -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver four.pda.suffix