Analysis

  • max time kernel
    48s
  • max time network
    142s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    10/04/2024, 22:01

General

  • Target

    43c3bee3aea4086037fc0ee7c5363295dc65b2b360c72c6ae3a7f32afa071f11.apk

  • Size

    3.7MB

  • MD5

    fd49aa23b071a9179ed76c5806227295

  • SHA1

    011326b19d4bae7e94fe41c5e03aa8d913462e79

  • SHA256

    43c3bee3aea4086037fc0ee7c5363295dc65b2b360c72c6ae3a7f32afa071f11

  • SHA512

    0150690eafa44ee34b5704d967bf5715120d732470906fa7210f94684393476fb121a8a500bed8c63b4ea7836fe59faa45e386e9d4c2f40f138724b8c899268f

  • SSDEEP

    98304:dhASrdH/lfEElgLCryEIsmLju9g1sYwynZz2KExkkHiR:xcEPIjLiO1sYjnbMkkY

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Aborts a broadcast (usually for hiding system events from other apps) 1 IoCs

Processes

  • com.mbhghgjhdv.sbapr
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Aborts a broadcast (usually for hiding system events from other apps)
    PID:4598

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads