815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d

Analysis

max time kernel
2341549s
max time network
160s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 03:34

Target

815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d.apk
Size

26.7MB
MD5

9114265fc4d8f024de0da6c0e5c767e2
SHA1

d6ba1dd7185bb8f5c415873391ea8f9f8c6ab1b7
SHA256

815646c16e4e2da289d67110d2afab7327a590bd336a2a251b23b251e796cb0d
SHA512

c6cc6bbca1c7dac664008e0f4b7de13da08f4e384d0d8b4526c638da73bcb736804aaaf286e7b4186448a285d227fc6edc569f101116789b9958d0d0c36220d4
SSDEEP

393216:p53b0xO+EyDlkDkXRVLwLnBAS5kZL4XOaqjP13NNV89K5AI1SZG069Rzme:rP5yBkkR9ytqjN3PuaP1yve

Score

8^/10

banker

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

Requests dangerous framework permissions 2 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4987

/storage/emulated/0/signal/base.apk
Filesize
24.9MB

MD5
99967011c5a1b9fdf2ce407a5bcb651a

SHA1
8cc104c3b8bc96e5ac38c7a2fc73fef2bba07dc9

SHA256
82420d73102328abf9c725ef4b807795733eff1e3670f42e565aceb79708bc4b

SHA512
e73564b557644b018b077c1ddaf8275a2f5d3e1faa8cbe236a3dbe49316a48b03096f548929d79fd5e05188bb7f550a9fc28207f6dbeb0f8504388167c768970

Download Submit