My ransoware.apk
- SHA256 0358f42b09d67c9429fb50fe3da02a4c18d03bbde6dd4e08146db6d6aac483de
-
Detects Arsink RAT
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Behavioral task
behavioral1
Sample
My ransoware.apk
Resource
android-35-x64-arm64-20260325-en
| resource | yara_rule |
|---|---|
| sample | family_arsink |
| description | ioc |
|---|---|
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| My ransoware.apk |
Detects Arsink RAT
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_FINE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ALWAYS_UPDATE_WALLPAPER
android.permission.AMBIENT_WALLPAPER
android.permission.BIND_WALLPAPER
android.permission.BIND_WALLPAPER_EFFECTS_GENERATION_SERVICE
android.permission.MANAGE_DEVICE_POLICY_WALLPAPER
android.permission.MANAGE_WALLPAPER_EFFECTS_GENERATION
android.permission.READ_WALLPAPER_INTERNAL
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_DIM_AMOUNT
android.permission.SET_WALLPAPER_HINTS
android.permission.SET_WALLPAPER_COMPONENT