Analysis
-
max time kernel
134s -
max time network
299s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system -
submitted
25/03/2025, 03:49
Behavioral task
behavioral1
Sample
driving-v4.4.apk
Resource
android-33-x64-arm64-20240910-en
5 signatures
300 seconds
General
-
Target
driving-v4.4.apk
-
Size
293KB
-
MD5
fd548aaf77ba7ce088c6945ef93a55c9
-
SHA1
257fb47afcad834a8d9691f9f2044bd77ed34b66
-
SHA256
0d9e79d8e22395fb952653b440c0bef36ea6fcd3536122044704b25030598769
-
SHA512
3149cb7141add77f7036cdf78e82dc94140d731c22425a8f6c103866360a50c76962748fb5f16b5f161fcb7ef71a981f230af1c2704a2bdb20ed2026c0b4ec70
-
SSDEEP
3072:VZeJmmaGOrkq72nb/Un0t2mFi9mp/t0uLL4Xa/G5b5oTfaAqG1ZjZaeeExgy4Zug:VkJmmaHrSnbjLTo8G4fbHPVDwL2fzW
Malware Config
Signatures
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones ahmyth.mine.king.ahmyth -
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox ahmyth.mine.king.ahmyth -
Reads the content of the call log. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://call_log/calls ahmyth.mine.king.ahmyth -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground ahmyth.mine.king.ahmyth -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN ahmyth.mine.king.ahmyth