Analysis
-
max time kernel
25s -
max time network
22s -
platform
android_x86 -
resource
android-x86-arm-20240624-es -
resource tags
-
submitted
13-01-2025 01:43
General
-
Target
ready.apk
-
Size
692KB
-
MD5
c5cd84f27901eef647e73936d84f286a
-
SHA1
aee96e4fabfb94753e3537a93fe3040af19ff94a
-
SHA256
8c3821ecad27b98016d1ddf8e511a909fdb61add882dd46b08806e24e7f6efce
-
SHA512
743ce68c03206ab5cde8cfd0e105791d524a41c4338c24fda8016c1e7f31c09a1724819ce89275fdf39a8ad5248b86db8bbb10bf2b2472031e37d89b1c48fa65
-
SSDEEP
12288:1buzE8bTe7rp+MLJ1Ksxy3N6W2/ERaSIQYKJRivXtnjGusT3cgtN0F6s6Rq21kgK:1uxbT0LJBIm/0YKJYtnjGHT3SF6sGN5K
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 4 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Performs UI accessibility actions on behalf of the user
- Queries the mobile country code (MCC)
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information