25429c0b0330a1a7523654de83f2444309e91141df4efe4a82c061e7b0dafe12

Analysis

max time kernel
153s
max time network
164s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
01-03-2024 22:04

Target

25429c0b0330a1a7523654de83f2444309e91141df4efe4a82c061e7b0dafe12.apk
Size

750KB
MD5

7a9567d27e41ffab2b5a4f0f8ff3c5de
SHA1

61f001a9ceb1a8bc1e19ce5e94d2f2711830952b
SHA256

25429c0b0330a1a7523654de83f2444309e91141df4efe4a82c061e7b0dafe12
SHA512

14f83a0a7a936b6a22021f9836c3596dcc34ffcf0279830358a81793b3de44c06023d77276a248323ca72a15512488a206b485980629c1e528029d01709a7fe3
SSDEEP

12288:Q8eJ6sgRALz8wKWkfI5WmpYshXZPbGwidNpgV:Q7J6s7Lz87WkfI5WmD9idNpq

Score

8^/10

banker discovery

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

Security Software Discovery
T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:5013

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact