Analysis
-
max time kernel
178s -
max time network
182s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
15-06-2024 14:45
General
-
Target
Standoff123.apk
-
Size
857KB
-
MD5
48b9c6baac4cd5348b1d4c4baf90c90b
-
SHA1
dc153759069d38b25770221c9022a79838067d7c
-
SHA256
7af7345e3aaefd36eebd58b9db18b480f61dc50ce15ecdaad9f9895fa266e1a2
-
SHA512
2040de4a3508b2e91e5d30b7da7f55f5152e72c48d273131bc6c80d04862c7ed26b9680d045d79cdef3c9c41f8c8b031eab7a4c3fe3b75184d1cc3499cc8f6f0
-
SSDEEP
12288:SaR92J6sgRMLz7dpM+fAfT+Kc90ky5WmpYshXZPbGwidNpgQ:biJ6s9Lz7dplYfT+Ks0r5WmD9idNpj
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
61B
MD574e03a7aa43f500ae1d1dd710004c0d8
SHA1b2ab9c889c97a7f24d01fcca229083467c2942f2
SHA256084925886979b19aae17b6740db3b381efdb7162de8925c2f6e3e28d5f34570b
SHA51255bd217fabb338dc5b0b351c5c28650f555a462f9362222e22a978a4e300f4d7cb77c14e1788ff9a9b52eac2d8558f831a0aa9bf0a34d9a55fb19e1eed5803c0
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
58B
MD525213e32a1baea8dc990b889c8b927d2
SHA13bba41a5c9069776178d903ba1ee0623291c620f
SHA256e75d2b1a25b3bf41aee7d264b142d14a7bcf4f6d4f6df57180ee114b8c23b16b
SHA51269312b22c4348200a7d6d8f7abe9bd33527186bb196e4ad836446a2828a7a02808eafbe99cae2b36b203e2af16ebc1be0d45a1467a0e96154eaf00dfa6644c33
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
85B
MD5bbd41d2062af3fe5e778bda3ec03383d
SHA1e55f812403b558bac61e679c7cc4cf598422e12d
SHA2561fe391a5624117ca71ac08069ad404226ac84af59274500dbd2ad7210a20233b
SHA51205c8e5ee608b522098d82d6f4d3552b022bdc788fce19044a16db8853b14c76fbaa38c01e81251a2af9b6c1a0af8e6d070748b81916e586b753475d19d1b70f2
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
76B
MD51e452e1a2c1003efaa013e655f7d29c4
SHA1caeb2d25ce0b4aa333ff28ceab0b2b9ab4497360
SHA256ffc801d3868b978b70a44406d0af5ab24bdeaf97a59be447691709d09cfb63f1
SHA512a2067f5a559d08f76603ba78be9e915d32b92712187c8ba33273e60d7d87825ea5f63640f2d8e2c4e1dbb05042e70e44d33615cb30427d49528e2daf343a3ca3
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
265B
MD5023e6972bec4430933592b36c015237c
SHA15901079d06f86089733e52839c475cc5164dc59d
SHA2563bb151261ffd91b97b8d8cc6bebf84b1c58b4868bb184d375208afb0834d0aba
SHA5121bcd65033b235932833e2ac59a0ddff9e8b58ee1f2b09c79b558021865c849f662697c9f2ce2cfaf5ad2000c15f0e4e22ec566b8388ca0418b47b02154613346