2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13-06-2024 23:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06.apk
Size

3.2MB
MD5

e531d732f2c7487a926140dda4a24d93
SHA1

3a4f93d8b5eec97da5b82af3ac47cf2fd9e929ad
SHA256

2d09bfc51f91b5b15442f7041fd99a1ab10e0542a3b911391a9647bab0f64c06
SHA512

6f7c92622d7bddba0cfe83f71297b3c061db49edf400c7e92d3db4a2463a04f352bbb9aa8e968fd6e39e8fbd8cae0c653c92da8c1a37826933b3983eda2e45ec
SSDEEP

49152:ZDq90w2MqWI9CYFx0SLBxAmMSrQjMYp2gLv93i0rh9pv5rw8hO/wE8u:ZDqyRl9/kABUjMU3i0rh1rwMO/j8u

Score

6^/10

evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

app.limits.up

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground app.limits.up

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	app.limits.up

app.limits.up
1⤵
- Makes use of the framework's foreground persistence service
PID:4424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/app.limits.up/no_backup/androidx.work.workdb
Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
99ede75ba54d5a3750b9430909c0ee7f

SHA1
97218163ea7d53dcbb300646e0c33b4f43b8a2d9

SHA256
dca0f0693b0503acef5210c668dd64316547bb958f7959cc40bcdaad0a50af5d

SHA512
a00ab7b173a1225da5c96fbccabf4719d9175bf186a8a07d9f4932e07eb426997d361faf57df2ac3b07d0b92e09a0d5272edff3a525ec89f57a2c671e168dd79

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
124534ad1bf20935e71c5270e13796aa

SHA1
869447964af5f2c1bcb826c7e2c5e5f9bf5956f8

SHA256
e04c3ada7bc4e8b322314130cec0d70a366d79a63bbd6a097b87a1ccde3e145c

SHA512
7969a2052fae47c9c3f845292085181166ade6c0acbd421bb6e878828654ed7710cd431731dcce922f0b9ef5e2d2bad944fdf5c7be810a832d3906d704d65686

Download Submit
/data/data/app.limits.up/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
6eebcce3265f96af3ad82bc404b4975f

SHA1
0a34303bac2a7c4db6f95137a08a916b3aaf75d2

SHA256
0775635f5c460fea1f358615713ab70ae4d5f40682b940754e8c2dcbc2f972dd

SHA512
9b87abace89e160e2cc0ed5c62109f79844c4549c17bdf8a61859b574fcef9ebf7d8aa20693532ce2a47afbb8d5e7f83896d860cfd8f1512d1422f61b7fc771a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads