Analysis
-
max time kernel
2314005s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20-12-2023 03:33
Behavioral task
behavioral1
Sample
8144eeaea116db215dd811df846cc85faa5e0de0c3962f3b00d1455da3ee998e.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
8144eeaea116db215dd811df846cc85faa5e0de0c3962f3b00d1455da3ee998e.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
8144eeaea116db215dd811df846cc85faa5e0de0c3962f3b00d1455da3ee998e.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
8144eeaea116db215dd811df846cc85faa5e0de0c3962f3b00d1455da3ee998e.apk
-
Size
751KB
-
MD5
6bcd6ac6b151e1ec4edf847724a6cca7
-
SHA1
f2dc5d5be9a90e52b329827041caae42f5c15ed3
-
SHA256
8144eeaea116db215dd811df846cc85faa5e0de0c3962f3b00d1455da3ee998e
-
SHA512
67fc1f89da337c7f708adbf9f9ff43e005ef1548b37b337ae8a3fee9f371e57d16120b82b296122a4457c7536585273b0bd40580f5be7c87e0786151879b0f0d
-
SSDEEP
12288:KOkrJ6sgRQLz3Biw127J+mJ5WmpYshXZPbGwidNpgB:z0J6sjLz3B/18J+mJ5WmD9idNpe
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
Processes:
cmf0.c3b5bm90zq.patchdescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch -
Legitimate hosting services abused for malware hosting/C2 1 TTPs