a22f6141cc23358e5e9957985ab7591a490c7ccdd73931d83ae25071358a3cc7

Analysis

max time kernel
3s
max time network
150s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
13-03-2024 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a22f6141cc23358e5e9957985ab7591a490c7ccdd73931d83ae25071358a3cc7.apk
Size

748KB
MD5

54838da577a8dd4afc1e75dd43b73839
SHA1

940f57d6c15087ba5873bda2b3d8f18f32becc30
SHA256

a22f6141cc23358e5e9957985ab7591a490c7ccdd73931d83ae25071358a3cc7
SHA512

5de5c98f657db8021fd6408e4945bcfb8ca5d3ead0fd7b77efe767a18ee47c6c588ded4ed279eaf45f565921c61b8c0fcb94d8ea9fdc6e5d1f4f1aa939e2037b
SSDEEP

12288:X32aErEla1a8LdeXwhDlUM/5WmpYshXZPbGwidNpgYn:XmaEIla1a6eXQDlUM/5WmD9idNpj

Score

8^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

Security Software Discovery
T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service
T1102

Processes:

flow ioc

35 0.tcp.eu.ngrok.io
115 0.tcp.eu.ngrok.io
120 0.tcp.eu.ngrok.io

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

flow	ioc
35	0.tcp.eu.ngrok.io
115	0.tcp.eu.ngrok.io
120	0.tcp.eu.ngrok.io

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:5099

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15