4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b

Analysis

max time kernel
148s
max time network
155s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
08-02-2024 22:00

Target

4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b.apk
Size

760KB
MD5

e2c87f3491f789adb7bd264960016e58
SHA1

0dd8fc5dd103b9b7a391342453532b80ce8b627c
SHA256

4ba83c85d76425340c66fb75cb42ed6cf60c602dabda33e0814bc048903eab3b
SHA512

68b79738344d92507273cdeff5e04289b3fb1bcd638d59f57ee1c9d50a1d5393fb87382695951f8f3e67d10b24024df04114b994853a6e729a3dfbddd4914e25
SSDEEP

12288:94v3krNp1rVOeQzLuJN0IPI0hXcWha1a8LVegtc:9trNpVRQzLuJN0ythMWha1aKeUc

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4915 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4915	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4915