fc2cbc8d925ee585cdc02e99bd467c8f943f891f377d3605a1e1329d33c7178b

Analysis

max time kernel
174s
max time network
140s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
21-05-2024 06:20

Target

fc2cbc8d925ee585cdc02e99bd467c8f943f891f377d3605a1e1329d33c7178b.apk
Size

631KB
MD5

77e3e03ba74747b0cbb3b2d72fa5dc8e
SHA1

6cf91fc0ca7b06a408fa40c55c43b8f3ee1c5983
SHA256

fc2cbc8d925ee585cdc02e99bd467c8f943f891f377d3605a1e1329d33c7178b
SHA512

faaaf30db4bedf9b63f036657530ab3031380e147ea38d1ecbafaa2785b91291c6f6e5112b8b9cc28f715eb577592130e1c56418a9069181c26e45ff9b80b35c
SSDEEP

12288:b9m4/lrMU5qnDfctsWfm9edzP5BTO/H+8X6F8oTD:b9dMbnzwdfm9ShFO/HfoTD

Score

7^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

Processes:

BSS.Absensi

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	BSS.Absensi

BSS.Absensi
1⤵
- Makes use of the framework's foreground persistence service
PID:4682

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/storage/emulated/0/Absensi/ABS.db

Filesize
24KB

MD5
1a602ad4804987d4e7c74cdc76d486a9

SHA1
82b3a65cdc4ca1dcd9eb889e0d94b1958bab510f

SHA256
f66992933c1ab753caa3da75ff814b113809cb7c2dcf3cbd51d327c2571da0d3

SHA512
6674c6677f936d8063638ae1a5508a552310171fbda367ea7eafa6fdccded540826c50b304fc74118e29f185dacc2b48430155c4acd4b562b92fd8164fddd113

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
512B

MD5
66029c99db2e59e8e314fa344e7f89d2

SHA1
336a88b6dc4e0331b882839bef4b1ee7674da8d1

SHA256
5f28f1ce6dd148587443d253e2ea6fb6b53a96bd035c12375af11d98a65458b1

SHA512
43e20ff19d0cd007cb37314c43090269b8559b1eed17b87992e4a1abf7418bfad1a5d0f728078977650f3df989331f1d5f70953bb5785adb33da02fe7489d3b0

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
8KB

MD5
3f3605d0b960a6f8fc83753dcb081ec1

SHA1
9b46014b6ce336a37baa226e643a44852a7fef5e

SHA256
aea6da9429595860df9ed55c97fad3d356041ee195c5d2e13c63c964e061d630

SHA512
e523faff7eb3b6f5214d7a9b4950c996350a6599dbb53b52f87ce5f140c4ad9e01642901a4bcf84a8f0684802b02670d2fbef2fc30cc00072b1ce4f0fe832869

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
4KB

MD5
514ca2e08b9b10daf89dbfe57b916cd0

SHA1
1e2727200a01f3181ccf0ed37caeee7a16b783d9

SHA256
9d4f2c20bfc9cf98653fc30f3a1312a9ca982555e17c5bbdafdc199466aad0c3

SHA512
6a6bb0d8a032192809a421141bba9473a947e0a4bf4326da7a375d4b219a67f4c122620e4bc26e281805116d9bb82b357d004704d3436c1469c94ba75916cb73

Download Submit