Analysis
-
max time kernel
140s -
max time network
152s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
20-12-2024 09:47
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20240624-en
android-9-x86
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20240624-en
android-10-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
1 signatures
150 seconds
General
-
Target
ready.apk
-
Size
36KB
-
MD5
f88df7fdd4b35ddfb6396b787595777c
-
SHA1
3131bd047ea7b5432f2c4ba906836500635d5ab0
-
SHA256
fbd92d95d675f5371a7d7cf101416c31b61e7fc22223212e66adb483dc81b071
-
SHA512
4b49a0733edab81eab3eaec439b31e7dcb60e3f1cb0d1f6b86c0f03de2befa9aa1a403be7f3d4fb25c9cc602f0e1fb28eb7779e6cb44c4101b4e1b7d1397286f
-
SSDEEP
768:w0YFU/bZzjVg2WzkldihZWMrOMHl6AsApn+ByP9:w0bF3Vg2MkIZhrOUl6As2nayP9
Score
6/10
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground package.name.suffix -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver package.name.suffix