General
-
Target
Ahmyth-aligned-debugSigned.apk
-
Size
293KB
-
Sample
240331-s76zmaeg87
-
MD5
97a4df8c6894f3888d1b91c3a6eaa2e5
-
SHA1
73e1666f15cd7b5061d24a8771d33870d50ecdf4
-
SHA256
6fbeb9fdce5e26e3d2d7d35103608c3e84fb7411157895c2279040aff9fb6ee7
-
SHA512
ffa46e684c69e43340c22e904e4218bd01b5f0899147fda541650d05d7f6d7c1c36a81e4de1337b9964d245b9ec6f1bca7be9067121c892b58084677f90ff695
-
SSDEEP
6144:N8iuy0OqjMfC6J1qbDqDNv6wEJ3XLBD7PVbPfX5s:N2OqjqSyDN3wVDL5X5s
Behavioral task
behavioral1
Sample
Ahmyth-aligned-debugSigned.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral2
Sample
Ahmyth-aligned-debugSigned.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral3
Sample
Ahmyth-aligned-debugSigned.apk
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral4
Sample
Ahmyth-aligned-debugSigned.apk
Resource
android-x86-arm-20240221-en
Malware Config
Extracted
ahmyth
http://Vallithebest-32755.portmap.host:32755
Targets
-
-
Target
Ahmyth-aligned-debugSigned.apk
-
Size
293KB
-
MD5
97a4df8c6894f3888d1b91c3a6eaa2e5
-
SHA1
73e1666f15cd7b5061d24a8771d33870d50ecdf4
-
SHA256
6fbeb9fdce5e26e3d2d7d35103608c3e84fb7411157895c2279040aff9fb6ee7
-
SHA512
ffa46e684c69e43340c22e904e4218bd01b5f0899147fda541650d05d7f6d7c1c36a81e4de1337b9964d245b9ec6f1bca7be9067121c892b58084677f90ff695
-
SSDEEP
6144:N8iuy0OqjMfC6J1qbDqDNv6wEJ3XLBD7PVbPfX5s:N2OqjqSyDN3wVDL5X5s
Score7/10-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Tries to add a device administrator.
-