fc2cbc8d925ee585cdc02e99bd467c8f943f891f377d3605a1e1329d33c7178b

Analysis

max time kernel
175s
max time network
137s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
21-05-2024 05:37

Target

BSSAbensi.apk
Size

631KB
MD5

77e3e03ba74747b0cbb3b2d72fa5dc8e
SHA1

6cf91fc0ca7b06a408fa40c55c43b8f3ee1c5983
SHA256

fc2cbc8d925ee585cdc02e99bd467c8f943f891f377d3605a1e1329d33c7178b
SHA512

faaaf30db4bedf9b63f036657530ab3031380e147ea38d1ecbafaa2785b91291c6f6e5112b8b9cc28f715eb577592130e1c56418a9069181c26e45ff9b80b35c
SSDEEP

12288:b9m4/lrMU5qnDfctsWfm9edzP5BTO/H+8X6F8oTD:b9dMbnzwdfm9ShFO/HfoTD

Score

7^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

Processes:

BSS.Absensi

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	BSS.Absensi

BSS.Absensi
1⤵
- Makes use of the framework's foreground persistence service
PID:4555

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/storage/emulated/0/Absensi/ABS.db

Filesize
24KB

MD5
1a602ad4804987d4e7c74cdc76d486a9

SHA1
82b3a65cdc4ca1dcd9eb889e0d94b1958bab510f

SHA256
f66992933c1ab753caa3da75ff814b113809cb7c2dcf3cbd51d327c2571da0d3

SHA512
6674c6677f936d8063638ae1a5508a552310171fbda367ea7eafa6fdccded540826c50b304fc74118e29f185dacc2b48430155c4acd4b562b92fd8164fddd113

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
512B

MD5
6e27671d6a2e78905616e518a6a4768d

SHA1
2d27f96e01c740e7fe9346e2abf8322c0bff5b94

SHA256
969b5f819a34b131962a571f4498e63a7e5234fc6e9daf2b2fead12908f4636b

SHA512
8c4a3789b4333061ac1d39dc25298a6942e83c084ad18f887a8f2a4478f4cd5c1d063132bd53a420aacfa0e4a55a8471ad455fb2d43229c778ded15baa80b55c

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
8KB

MD5
8d9d8954fc40eeab56128cf5a6da6fe4

SHA1
22a9ec015542c6ee1b933ecc98838ad5583c7181

SHA256
e7202dcb0011a39efe962c544864fd094690c8fbe3253668dbccd035695b6b03

SHA512
b7203e507060f927e800e7b0f2a0eda5c102d4af56994d6078048fb3450bdf76135aa0b017a3ead1cd5eec32cb3b35ad337f650d572369c5823fe6df05d782d4

Download Submit
/storage/emulated/0/Absensi/ABS.db-journal

Filesize
4KB

MD5
eb1dd238302685f718b2b809884f58b4

SHA1
0221f0c2ed4cf97f86004654a2211293ff673c2b

SHA256
8b8be483b9dd86d99320fe97009849fa37f34833b450992f08173da7b8b69a41

SHA512
00cbe40038a8d29069d89314c0626f5ba4abebc26a1cb3cfc2ced8f631b0071187c80a671dd3dfd1b2f4413dda0a5324212f0d6d8ef647d84419d7d92c27669d

Download Submit