4ec96e1e95d7a67ce6641485d1064e356f8ae95f69fca3acabbff8cce3d324d6

Analysis

max time kernel
148s
max time network
157s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
09-03-2024 22:04

Target

4ec96e1e95d7a67ce6641485d1064e356f8ae95f69fca3acabbff8cce3d324d6.apk
Size

760KB
MD5

dd9d9388754fb1b73a97049e88e23a71
SHA1

04ece9bbe9a595fa71baeed0105fc78405d6c205
SHA256

4ec96e1e95d7a67ce6641485d1064e356f8ae95f69fca3acabbff8cce3d324d6
SHA512

f6fc487afb4b526b80b596d0c77cb7c55332393c3ee43f26b3f961adc24ff5725b91fb0d4be4a747ef47eaf7ad4c29001e2b197b5ef0e71cafc1995380726850
SSDEEP

12288:D+oct7Aa1a8LVexfNBNQNI5WmpYshXZPbGwidNpg2L:DD7a1aKex/NQNI5WmD9idNph

Score

8^/10

banker discovery

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

Security Software Discovery
T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:5025

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact