Analysis

  • max time kernel
    68s
  • max time network
    82s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    19-02-2025 10:24

General

  • Target

    ready.apk

  • Size

    692KB

  • MD5

    48bd29da5720cbe378f451e1b740dec2

  • SHA1

    54c9ca15b3caf0e0dc267fae77a71c9a5ad0ecd1

  • SHA256

    722d667a3c7d543633134af590029799eb48699abaeda4947dec79af4018cad7

  • SHA512

    f6a6965fca1d8273f0bb70d014e588ce86ecd7cd2d1a6a0d79c51cf78d1205bd7bd955c8322f29f14ab4fd5925e317cfbb6ca8cf92160fdae126dd73a8f169c9

  • SSDEEP

    12288:ExEyg5BP2Kk6M0t8PHeVeX7/cZtAETo6eTUusT3cgtN0FS16Rq21IggvtWDdZv:tyg5Bpkm8moX3Gn+UHT3SFS1GNdddZv

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Performs UI accessibility actions on behalf of the user 1 TTPs 8 IoCs

    Application may abuse the accessibility service to prevent their removal.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Requests enabling of the accessibility settings. 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.appser.verapp
    1⤵
    • Makes use of the framework's Accessibility service
    • Performs UI accessibility actions on behalf of the user
    • Queries the mobile country code (MCC)
    • Requests enabling of the accessibility settings.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4257

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads