4faad62d48c91e8292e40dfc2e7fc298ecb51745d792415c0ad3b65a82e194fe

Analysis

max time kernel
148s
max time network
155s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
17-02-2024 22:04

Target

4faad62d48c91e8292e40dfc2e7fc298ecb51745d792415c0ad3b65a82e194fe.apk
Size

759KB
MD5

80d6650095d4b7208d66ea3f5b6e0aa6
SHA1

5da78a5ff13faed1e36e00eb6346025e1fb51b8e
SHA256

4faad62d48c91e8292e40dfc2e7fc298ecb51745d792415c0ad3b65a82e194fe
SHA512

4560b211105bc41d90617dc41eeaeee4c2522c75b789950b9f4466b7ac599de9789f41460fe94388592cf7536350d28447a39ad09ec39d8c25353446e83563a7
SSDEEP

12288:DMAa1a8LzeoyT9YuW5WmpYshXZPbGwidNpga:DMAa1ameoE9YuW5WmD9idNpF

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4479 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4479	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4479