4205472e5107adf9c45c015f3b1e7946d5ba9c017009c9ae0a6709112edb0c15

Analysis

max time kernel
154s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
01-04-2024 22:01

Target

4205472e5107adf9c45c015f3b1e7946d5ba9c017009c9ae0a6709112edb0c15.apk
Size

760KB
MD5

0b8e632b6f77e187537a0587931d3821
SHA1

ff529896e5891d7466235af347bbbb9d8ce071ce
SHA256

4205472e5107adf9c45c015f3b1e7946d5ba9c017009c9ae0a6709112edb0c15
SHA512

c8d451ca23ee44d5dc1ee9e4adb81b71b06cf505714678831df9edc3f1ca19fa7adcf27890b7119fdf8b221f543e52c9533ec5ffdc03036f679e2410ca7a9dfd
SSDEEP

12288:DuZF6ra1a8LVed3UB0M7uxB5WmpYshXZPbGwidNpgE:DuZF6a1aKedg0GuxB5WmD9idNpn

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
banker discovery

T1418.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications cmf0.c3b5bm90zq.patch
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Makes use of the framework's foreground persistence service
PID:4478