88654e4ba373b42b8167f2006d9c642f6f6e14cbc478154fb48990b7260c3625

Analysis

max time kernel
149s
max time network
134s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
22-02-2024 22:03

Target

88654e4ba373b42b8167f2006d9c642f6f6e14cbc478154fb48990b7260c3625.apk
Size

760KB
MD5

9c4feebbceb74595d62981faaab3ec70
SHA1

a8d2339ca6a9ea280d7d7dd9f0eaf6a8c88a8f3f
SHA256

88654e4ba373b42b8167f2006d9c642f6f6e14cbc478154fb48990b7260c3625
SHA512

d36833803bbfc76180ecd3fad75453b9aeebdb8a6a32ab5d3eae4feef76358d0fde2b0b87c91a8d9c555c49c7855fc1874b2d72eb871b4dbd67bfe2dfdb86848
SSDEEP

12288:SQNPz8uPTa1a8LdestaUcJ78xZ5WmpYshXZPbGwidNpgQ:SQNPz8Ka1a6es5c58xZ5WmD9idNpD

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

cmf0.c3b5bm90zq.patch

pid process

4275 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
4275	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:4275