856e5326e78fafaa75bdbb550a680ad8e6eb88c67c477e09d6a45d9804eac7fa

Analysis

max time kernel
125s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
01-06-2024 22:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

856e5326e78fafaa75bdbb550a680ad8e6eb88c67c477e09d6a45d9804eac7fa.apk
Size

3.7MB
MD5

3b8ce99f1c395ed9384fdd1d0b096104
SHA1

7a4132b21003b1cc3cdf5a306cf956df87e7c978
SHA256

856e5326e78fafaa75bdbb550a680ad8e6eb88c67c477e09d6a45d9804eac7fa
SHA512

2548564dea13bff2d57b833733a2e2ea26f140675425ee6b54dbcd889b59962fd82f035117efc710bc02debaef5d3cdd4900ba145185dcdbe0d95861ad6e624e
SSDEEP

98304:XC6kUn6DX8C+Smco1FnrDJexQ1z7qsWgYoOWz4:0UnQs4wXUxQz7qujOWM

Score

7^/10

evasion impact persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.inferiorly.bottlemaking

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.inferiorly.bottlemaking

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.inferiorly.bottlemaking

com.inferiorly.bottlemaking
1⤵
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4273

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads