Analysis
-
max time kernel
148s -
max time network
159s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
22-03-2024 22:00
General
-
Target
d08f288d2293fd2c39726f3a407a8a24fec85868f8576554395fe0b2a3a483a5.apk
-
Size
879KB
-
MD5
d89f39b6fb9895bc109bf81cf805a6e2
-
SHA1
252b79742742b107a211f7e83690a4fc50fd1546
-
SHA256
d08f288d2293fd2c39726f3a407a8a24fec85868f8576554395fe0b2a3a483a5
-
SHA512
3539c2b492522cb7b08c9d0f6e109617033d42a46a0023323ccc6a71327a9bf0281ac254220df4a804bb07926fc47456506dec85dbfae449681e69fb7bb1af84
-
SSDEEP
12288:TVNqfVa1a8LVepwthneimK6Yh3DY5WmpYshXZPbGwidNpgg:TV8fVa1aKepwthei1T3DY5WmD9idNpv
Score
8/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Makes use of the framework's foreground persistence service