b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a

Analysis

max time kernel
156s
max time network
145s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
05-03-2024 22:05

Target

b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a.apk
Size

760KB
MD5

9862d6c9d0ae631645b577bdd3084261
SHA1

3ddfd4615db0a919dcf9a0aa4ee848d64ba8cfbc
SHA256

b5ec779f9d7480469261914029142828229927db0dbf9f5d4ea1bd655406d42a
SHA512

e002f04844a3bb2a94a3fe8c76bb9725b999a0209040765d124fbfba2e8acc54f9bca760d9752f2a9f5978a8aafe35a7aeaf4f98d0c877e2dba7f5ccdd09c746
SSDEEP

12288:ViG/WBJ6sgR8LzV4NsrCkX5WmpYshXZPbGwidNpgD+:cJ6s1LzVlrCkX5WmD9idNpR

Score

8^/10

banker discovery

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

Security Software Discovery
T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:5049

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact