a0f78672495d8858c42f99336469ccf1e25eaa47ac3ef1c500016d5d6055d65f

Analysis

max time kernel
148s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
21-02-2024 22:05

Target

a0f78672495d8858c42f99336469ccf1e25eaa47ac3ef1c500016d5d6055d65f.apk
Size

760KB
MD5

899ca67f1e7136727e48c406caf8a9c0
SHA1

eba44931f3ba1d6670f8e0b9ef39cedf278987b2
SHA256

a0f78672495d8858c42f99336469ccf1e25eaa47ac3ef1c500016d5d6055d65f
SHA512

b347c6e1e845eadecdeb28ce9f95bcebb3c7fcf5e6861f827dbd3ea6b1f031f476697eef2af0c3a847dd126da2fe9118e2e390a256d48e9d2fe766f8ecd5a6d8
SSDEEP

12288:VVYOj0KJ6sgR8LzPBHiFuv+Q5WmpYshXZPbGwidNpgIl:VVYEJ6stLzPgFm+Q5WmD9idNpr

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4661 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4661	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4661