General
- Target EVNCSKH.apk
- Size 12.9MB
- Sample250312-bv146stsaz
- SHA256 ceabe07a066a4562e821f8304eaca6af2a79cb86e12814b1272d789e6c8caf45
- MD5 581043c2c9051b4b97c5e915b0d1adf8
- SHA1 0e6ec22f1b3bede9a380fd81f8f0f16aee12cf2c
- SHA512 e7e615fff619507e1530472d8f84d626c6cae6e65f133e42745f3238c921e9146ed976de631f3cff2ff086ad3689e5bfc9af5a39e514939b0aa81ed18074f388
- SSDEEP 196608:XNcJ8pgHCC+dECfxXsuoUXdSpRFnSZ4KCFmyKElvPJlYL11ToXJiyJMCTLAg9stx:HxXVSpeLCbvPJlYxtoJ5M2kgXc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
EVNCSKH.apk
Resource
android-x86-arm-20240910-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target EVNCSKH.apk
- Size 12.9MB
- SHA256 ceabe07a066a4562e821f8304eaca6af2a79cb86e12814b1272d789e6c8caf45
- MD5 581043c2c9051b4b97c5e915b0d1adf8
- SHA1 0e6ec22f1b3bede9a380fd81f8f0f16aee12cf2c
- SHA512 e7e615fff619507e1530472d8f84d626c6cae6e65f133e42745f3238c921e9146ed976de631f3cff2ff086ad3689e5bfc9af5a39e514939b0aa81ed18074f388
- SSDEEP 196608:XNcJ8pgHCC+dECfxXsuoUXdSpRFnSZ4KCFmyKElvPJlYL11ToXJiyJMCTLAg9stx:HxXVSpeLCbvPJlYxtoJ5M2kgXc
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network