Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    17-04-2024 22:02

General

  • Target

    107b8e65bcdb465da65b3dac004ec44bcf6d4b24ecc554af6f84aed150cf2846.apk

  • Size

    4.5MB

  • MD5

    ecc9dd436c7802480311732c85353045

  • SHA1

    d0d6b74aeec242edbd9019a5d3b202d716d89bfa

  • SHA256

    107b8e65bcdb465da65b3dac004ec44bcf6d4b24ecc554af6f84aed150cf2846

  • SHA512

    e7590f4fa47bf7ce98b6818040a2fa3bfc9abf645aaa81b0c477b07ed20439b3aa14ac4d4148ef7d1da48ca385b7fdb1294bdd6c706d55c40e9d59d461ac5fc2

  • SSDEEP

    98304:4yRtaWQ8DaW6PH2lCJMhh2kYOpSao/Kr1JZiWj9:ZKn8DqfTJ42QpFZiWJ

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    PID:4179

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/systeminformation.android.app/config17-04-2024.log
    Filesize

    63B

    MD5

    0e1022a261dfdfb852f83ee54276a5c1

    SHA1

    e5d229017174d8e34867146792db272ec39b550f

    SHA256

    4daf11f29ddb674e6b27ae2937b3b391a063770fa2aa4beb92c40fd8fbf54047

    SHA512

    adb5c8f7faa4948682079a534c50d9f2680dfd0917bf83543096c61c3edb2be390569b309c7621f9419b87caab7f4e886986553d2199ba0703ca39d9563c6b63

  • /storage/emulated/0/systeminformation.android.app/config17-04-2024.log
    Filesize

    218B

    MD5

    4ed82e8e33b0cb42c4416444d526df2e

    SHA1

    033d38f0be6f7a90266bfce3f25bf30043d32bf9

    SHA256

    bd0cc69f00615e4f27b5d1c902d9c188ac8be5d9da1140396d8940372bef30cd

    SHA512

    e4d562d1416c380069fbc2e45606071ff927dc39634db9e00fcea6160ec56394d2ffb7341f3fe62d3d208293ae48516ffac7f4245be7d0fe706eb6bc0cc43e91