8c4fa5593d3c66c224009acec40135dde05f2e31c323c43506207596ae2ec7f1

Analysis

max time kernel
12s
max time network
168s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
23/03/2024, 09:42

Target
Rat.apk
Size 293KB
Sample240323-lpdrssfb64
SHA256 8c4fa5593d3c66c224009acec40135dde05f2e31c323c43506207596ae2ec7f1
MD5 19a4eea928744bf196cf88dca268cc79
SHA1 3c2718c28e212f8f205c9069ab87785a4bebca98
SHA512 7d9704295b43d227ed433f121fbfa6f221e86d9b4b0f9743818e6bc1acec8a764f804ce473bd71d1009a851422240d7ceb5dad2eb4c0d63f2700cd4818554768
SSDEEP 6144:mAtwq9UUHGpBAKqWkvZZdyfYlhsY53LBDrPhbXfKu1:mANO2GoKq3RGglhp1D7t11
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	ahmyth.mine.king.ahmyth

ahmyth.mine.king.ahmyth
1⤵
- Makes use of the framework's foreground persistence service
PID:5122

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact