2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06

Analysis

max time kernel
7s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13-06-2024 23:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06.apk
Size

3.2MB
MD5

e531d732f2c7487a926140dda4a24d93
SHA1

3a4f93d8b5eec97da5b82af3ac47cf2fd9e929ad
SHA256

2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06
SHA512

6f7c92622d7bddba0cfe83f71297b3c061db49edf400c7e92d3db4a2463a04f352bbb9aa8e968fd6e39e8fbd8cae0c653c92da8c1a37826933b3983eda2e45ec
SSDEEP

49152:ZDq90w2MqWI9CYFx0SLBxAmMSrQjMYp2gLv93i0rh9pv5rw8hO/wE8u:ZDqyRl9/kABUjMU3i0rh1rwMO/j8u

Score

6^/10

evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

app.limits.up

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground app.limits.up
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

app.limits.up

description ioc process

Framework service call android.app.IActivityManager.registerReceiver app.limits.up

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	app.limits.up

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	app.limits.up

app.limits.up
1⤵
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4237

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/app.limits.up/no_backup/androidx.work.workdb
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
34844ce62ccbbb91380dcd657b0c298c

SHA1
33c340fcf9776d428d1798a7eeb4da9df022baf3

SHA256
2c335c0308988ff2aba33a1ee0d8b6e9080bd1100c33e376129ae97a095c859a

SHA512
cc2d381bf9c4d40b2a28753abf93ad347bddf0faf713b86f8f33349e8c90b022710c3f4aff20e5214dce8ebc74272283218ebc059db5a070df91ee4ed00e01e5

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
8b3c01560479eed107486f6cde68a781

SHA1
85fd5b015ecabba602599a8796dec3408426a1b7

SHA256
95215acff1f8895eb309700cd37f82f625388af25797a1cef4dd7ee417afb822

SHA512
89a0f3147c806b66b5ffc9f16afeb150a290177757b54acd53c000b6be92397ce3b58db18ea17ca83764615fe54c7b902a28a76fc1b78269572c1df8118383b8

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
e0eeb8e39ed15217fe3fb10c97913685

SHA1
515441389b3863dbe854f1f34366cf664ba041f5

SHA256
773048da61b01d537c774cce88b07d61bb69e270f4c5095af6bd77989d377f2b

SHA512
53ded2baef8d730745b4b4b2e5894fa4bbd9d4005ebb607d1f004b49a29f7d9de209972f8361a7517384cbec588ec0584fe17af22b804345116d66e669b8efcf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads