e3273a54f72486c2937b52cfcc87331fb5324db75b2c29e7fa13bf420bd82061

Analysis

max time kernel
145s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
22/02/2024, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e3273a54f72486c2937b52cfcc87331fb5324db75b2c29e7fa13bf420bd82061.apk
Size

591KB
MD5

40723ea13ff46a78f7b122fdee2803fd
SHA1

372bc8d61c56bde9a9ab6545121aafc707e28f50
SHA256

e3273a54f72486c2937b52cfcc87331fb5324db75b2c29e7fa13bf420bd82061
SHA512

791577c6a12e1e2f25620f773329279dcab4344e4034999e8c9ff8f2cd8b65f5bc372a28c83eea4c069ee1061530c1d94d0315a5b8865e562c7fb1df4e91025a
SSDEEP

12288:W5AAvIq/R4Mb28zqU9ulzqN437UlbCaXlXNBdZ:kPvgMJuUglzqNI2bvlZ

Score

8^/10

banker discovery stealth trojan

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs

banker discovery

Security Software Discovery

T1418.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

Removes its main activity from the application launcher 1 IoCs

stealth trojan

pid	Process
4475	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4475

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads