Analysis
-
max time kernel
111s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
19-02-2025 10:30
General
-
Target
ready.apk
-
Size
692KB
-
MD5
82b3d1e048d440c286131650dc6ca9d8
-
SHA1
7697b560d5b3d6d99ebe49a4e6d4c4e1b47ff843
-
SHA256
11bd8f00a6c26a3277ecad50f031c6d341da0e3997296a1ce2ed38827bf62891
-
SHA512
b7f337ef686022a02ec5a1c41607d37dec873b6a69749dd5ff7c3b22162c0bfd533ecd07d49312d67e8b67bf588a38bb20c6b35eb710801c643f6116c90e1066
-
SSDEEP
12288:O1VMC9BHFg+H6MT4ThOx1z6amPbWLpiusT3cgtN0F8I6Rq21XgDAtWDpO:O1Vr9NFgO6JUzzZmzWUHT3SF8IGNQnpO
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Performs UI accessibility actions on behalf of the user 1 TTPs 4 IoCs
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Performs UI accessibility actions on behalf of the user
- Queries the mobile country code (MCC)
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information