Analysis
- max time kernel
149s - max time network
156s - platform
android-11_x64 - resource
android-x64-arm64-20240910-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system - submitted
20/01/2025, 19:37
Behavioral task
behavioral1
Sample
Red_Cube.3.apk
Resource
android-x86-arm-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Red_Cube.3.apk
Resource
android-x64-20240624-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Red_Cube.3.apk
Resource
android-x64-arm64-20240910-en
3 signatures
150 seconds
General
- Target Red_Cube.3.apk
- Size 6.4MB
- Sample250120-ybtbjsvrew
- SHA256 364748453f92475d6e408c554b26eebaf4d951d85b80c04c41fa916183a6257d
- MD5 3f020099ef8579a422e171e23f737185
- SHA1 7e2ce2da55903a347aa0227776888ef3cd7b0495
- SHA512 f76411b37d19fb443e28d3969a34b771a5154e1e9e323f16b0ad14ad4fc5a84d9a682e87c557db5478082faaa9a582f46db17c3159777c3bb8984c0534d385d5
- SSDEEP 98304:LRAtiM4n4saGOZBVm+h2t4edOjuG5f9IA9RvCt9l0p7UWEc/xPaE30ZJqUoaj:ygMlm+4dcxZAtXYIp4xPaEj0j
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock redcube.apk - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground redcube.apk - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal redcube.apk