Analysis
-
max time kernel
8s -
max time network
8s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system -
submitted
16-02-2025 07:42
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-33-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
ready.apk
Resource
android-x86-arm-20240910-en
General
-
Target
ready.apk
-
Size
9.5MB
-
MD5
1247bbd2766f727e860e722883f2d8c2
-
SHA1
320ab3bd65e180dcf94ab3998d9c9656da0de6fb
-
SHA256
18f0d2b82aefca7a7597f0c4dc75c37ff01b8c385964726cce4413b96098bf3d
-
SHA512
2c6b645e22beb612be6e6fa5a40832468cae2279f509f4f32d629ac811024bb79160da12c9522e72bdb9c0750878575a1f0c334f402a64eca296ab68510ec115
-
SSDEEP
98304:kmn3D6nGRfWPbyYk0fvSlXiOdzz1hJTAudmzU3zByTG0tVKuaq+:X3VybyYk6DOzZ/AuwzUUN6
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock concrete.ban.roger -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground concrete.ban.roger -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule concrete.ban.roger