Analysis
-
max time kernel
149s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
20-01-2025 19:37
General
-
Target
Red_Cube.3.apk
-
Size
6.4MB
-
MD5
3f020099ef8579a422e171e23f737185
-
SHA1
7e2ce2da55903a347aa0227776888ef3cd7b0495
-
SHA256
364748453f92475d6e408c554b26eebaf4d951d85b80c04c41fa916183a6257d
-
SHA512
f76411b37d19fb443e28d3969a34b771a5154e1e9e323f16b0ad14ad4fc5a84d9a682e87c557db5478082faaa9a582f46db17c3159777c3bb8984c0534d385d5
-
SSDEEP
98304:LRAtiM4n4saGOZBVm+h2t4edOjuG5f9IA9RvCt9l0p7UWEc/xPaE30ZJqUoaj:ygMlm+4dcxZAtXYIp4xPaEj0j
Score
6/10
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
redcube.apk1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)