Analysis
-
max time kernel
178s -
max time network
149s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
-
submitted
15-06-2024 14:51
General
-
Target
Standoff123.apk
-
Size
857KB
-
MD5
48b9c6baac4cd5348b1d4c4baf90c90b
-
SHA1
dc153759069d38b25770221c9022a79838067d7c
-
SHA256
7af7345e3aaefd36eebd58b9db18b480f61dc50ce15ecdaad9f9895fa266e1a2
-
SHA512
2040de4a3508b2e91e5d30b7da7f55f5152e72c48d273131bc6c80d04862c7ed26b9680d045d79cdef3c9c41f8c8b031eab7a4c3fe3b75184d1cc3499cc8f6f0
-
SSDEEP
12288:SaR92J6sgRMLz7dpM+fAfT+Kc90ky5WmpYshXZPbGwidNpgQ:biJ6s9Lz7dplYfT+Ks0r5WmD9idNpj
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
76B
MD58e8b967fb0331044fb2ad50d32be4b07
SHA16ab0ee7181c0ef14eabe32ee3ab054fa0dace109
SHA25626662578cc15746f28292c8f6f4c0084e817d762523ebc772b92bd17e8d4a8ba
SHA512c2578a05cbe7a9fd64b414a528174a68716fe449ac4846e6101af6ee95b782009d4643f0c08c3f87248e9462bfc3a28464f5f529d5d6aa8c61c7fbdb78937623
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
80B
MD5e1c626d0ed186c6c1a86ae46a20c877a
SHA11137b6dd50922c3098cd06650568803c2f91160b
SHA2562cf5797456751260b97f0badb4002f7f57df37c5139c91791c438d995ac0442f
SHA512c0c8ba814e76fadeec66b23aadbf9702460b505c0ee83570ca3496fba9c4811eb2b98f39c5cacffd1ed75a4bd172d945dbd5c9070d68cebe40c71a19c5fb9835
-
/storage/emulated/0/AxelBolt.net/config15-06-2024.logFilesize
85B
MD57374d01b39aec39a461d7826cbed78f8
SHA178a11331ece950118b99f571dac8273b83af8312
SHA256a8cc8d977b6def22e0828a6d0b9a6058c7d9336ed64ba6093c21ab3fbfc13d55
SHA5124d019b7f903433f7546fd0803a772f97f70a7794fbfc980cf475e7250e33c312aabe53a59586f368e4ecef67a908d478bec88bc51435ddf4bfd34c03c046f85e