efbcb98be75a60eadfac49b64eba535108d28c417485e641de0c9cdadbc1d213

Analysis

max time kernel
168s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
21-05-2024 05:58

Target

wms.apk
Size

3.4MB
MD5

a7d4f0e210b20f9aa8dc091daa8e6136
SHA1

066f38cce97bed0cd717ab3ab91147916a24a7f5
SHA256

efbcb98be75a60eadfac49b64eba535108d28c417485e641de0c9cdadbc1d213
SHA512

2b3ed23ea209ae33ef12507ce82db98d61fc51dad818187f2af0f5355f293a8e94684dea5c19c08fa87658cc8a7728dba74670709d0d938e45c4f2d9fafd8907
SSDEEP

49152:pdIPIwJiTZCtKYa6ic4W9O0cCS37dz5hzgRA8BP118xUTvjIyVSrzStLrL7Nz:nCA4w+/O0cCA1hzgRA8BP118UCSVrL5z

Score

7^/10

discovery

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.hcp.wms

com.hcp.wms
1⤵
- Queries information about running processes on the device
PID:4484

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact