a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d

Analysis

max time kernel
2518539s
max time network
147s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 11:17

Target

a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d.apk
Size

588KB
MD5

efb9a2a33243cdf10d2316abc52e1766
SHA1

560764f4f253d27d84ec473f570ea289de01a86c
SHA256

a95d59eb2e828edff5f8e091a1372f7212609574a9b848bfde6a72de83c3072d
SHA512

2f2970c7377fbed06787f5f5168b9b944d75d9137af5d890f34ffbdb24054a8cb78e9b870a5c328512d02867370f4aa5352eb9260f56b8b5a8230548fe34d181
SSDEEP

12288:Oy9ubWZlxi2odwvi/RwncvOy9FeJrm0uVD/7j6mf5Ih:19ubsPgw6ucvtFeJrm7bP6mR8

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmfO.c3b5bm9Ozq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmfO.c3b5bm9Ozq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmfO.c3b5bm9Ozq.patch

pid process

5074 cmfO.c3b5bm9Ozq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmfO.c3b5bm9Ozq.patch

pid	process
5074	cmfO.c3b5bm9Ozq.patch

cmfO.c3b5bm9Ozq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:5074