Analysis
-
max time kernel
144s -
max time network
149s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
30-11-2024 22:00
General
-
Target
e37359726ec7167a79f4819ed00c335b53f9f19d7dad48db701ece952ca1a4cd.apk
-
Size
1.9MB
-
MD5
c19472501edfa410fbbf54ad9afab148
-
SHA1
e4385287b5a3b5c5c9386297d1eaae1471e54424
-
SHA256
e37359726ec7167a79f4819ed00c335b53f9f19d7dad48db701ece952ca1a4cd
-
SHA512
09875bc988e1b40697db0e431fbce549929773aa420a56498fe06962bbf9d278c58ba8feacc80a5c3676711b0dbee558cd0cb4f72b98c76486a45e9b3e16e8d3
-
SSDEEP
49152:YBFY9BLoyPnZnX4XrrkcakDAR1JgC73/5:YBFsBhfZX2fzDAR7B
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
com.example.data.serverx1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Tries to add a device administrator.