Analysis
- max time kernel
143s - max time network
152s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
01/11/2024, 12:16
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20240624-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20240624-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20240910-en
2 signatures
150 seconds
General
- Target ready.apk
- Size 29KB
- Sample241101-pfxp4askap
- SHA256 d832569f4bef206d50e2a2719312826d65ef7b95da9b008989b5d591195f9799
- MD5 5e2d6a7c8bdee0f83c623afd72cf408e
- SHA1 98061a731f70f35c0e209696e5dc69232d20dc47
- SHA512 f917a43e62f324e610ecd16446e46623680330911e455427f8985aa14dadfd24a6da9a0e7ccad15dbe288c276943e7fe24429ed800e6a476cd109977fdb26949
- SSDEEP 768:g1qu/ssH/ZEqynEUsoKivy+apcKE85o0saXT10LOSgLud:XAssf+qyEEha+Aa820saDukq
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
-
pid Process 4939 four.pda.suffix - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground four.pda.suffix - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver four.pda.suffix