f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27

Analysis

max time kernel
148s
max time network
137s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
19-02-2024 22:05

Target

f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27.apk
Size

924KB
MD5

4adb46e9622839c17ea578e5ebef1da5
SHA1

f4845776dd5f199ca5f284a6ad6ad72010e428f5
SHA256

f4899deba4c9193ef62774942726d413ddad8b8b542a25e44917d0e0e9b76e27
SHA512

3136fc5e89e165d5106e3aa6fe5b59eaff06b69d8522ff0d40ce0e441ecf1ee7bc2288cb97e1bd1ca17258c9d5c36c5aab6a90f94d6ad1761f9868ec06745f05
SSDEEP

12288:ErrrLgamviiQmxCdgbx3BIsMlBZRvS0qkMgQMhDvoMECQMMCaA:2rfRiXQdgbxxIVlBZRrqdgxRv5ECx9p

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4484 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4484	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4484