50798f92feb15a666b13caa32874baf645ee8fd607c7f71163af19d7df3e281b

Analysis

max time kernel
2s
max time network
160s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
05-03-2024 22:04

Target

50798f92feb15a666b13caa32874baf645ee8fd607c7f71163af19d7df3e281b.apk
Size

1020KB
MD5

8c6aa1140a95c8cfbbe92da8dec4728d
SHA1

8ee5b355ce5d761bc4f6b32f38b4acfb2b186964
SHA256

50798f92feb15a666b13caa32874baf645ee8fd607c7f71163af19d7df3e281b
SHA512

c01ae37fe06d361d166cc64ee5427adc9c070e1c26fdddf7b2c70deda583885817cebd40c707197eb8ff3f501432cd0c0c0eff5682f6bd29c5dc29289d851d1a
SSDEEP

24576:8sZmJSywW6KRk4CXl5eCwa7muf0OU4bkZgJPVXM:jmJ96K9glWalf0zZgJPa

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

cmf0.c3b5bm90zq.patch

pid process

5095 cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

pid	process
5095	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Removes its main activity from the application launcher
PID:5095