49e2423a56b4e00f6852e30ed2197f41ce5a47c330c1f9f24f092d575bd31973

Resubmissions

21-02-2024 07:14

17-02-2024 22:03

max time kernel
3s
max time network
158s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
21-02-2024 07:14

Target

49e2423a56b4e00f6852e30ed2197f41ce5a47c330c1f9f24f092d575bd31973.apk
Size

749KB
MD5

4eb7b664f21a5e66d9f43bd51210f0b9
SHA1

840418be7539bc5b9ef821e75a2da7baaada65e5
SHA256

49e2423a56b4e00f6852e30ed2197f41ce5a47c330c1f9f24f092d575bd31973
SHA512

20aa0c8ff8ba68703cbe21ed04d12f98de7c34b7470d45c4e057b196c2fd5910e65c33ad083a5eb8837777011859786cd71cf195f85d421c99cd9e89c8988f32
SSDEEP

12288:DlCa1a8Lre300T3Yq5WmpYshXZPbGwidNpgd4:wa1a2e3NT3Yq5WmD9idNpN

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
banker

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4980 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4980	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4980