7af7345e3aaefd36eebd58b9db18b480f61dc50ce15ecdaad9f9895fa266e1a2

Analysis

max time kernel
1078s
max time network
898s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15-06-2024 14:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Standoff123.apk
Size

857KB
MD5

48b9c6baac4cd5348b1d4c4baf90c90b
SHA1

dc153759069d38b25770221c9022a79838067d7c
SHA256

7af7345e3aaefd36eebd58b9db18b480f61dc50ce15ecdaad9f9895fa266e1a2
SHA512

2040de4a3508b2e91e5d30b7da7f55f5152e72c48d273131bc6c80d04862c7ed26b9680d045d79cdef3c9c41f8c8b031eab7a4c3fe3b75184d1cc3499cc8f6f0
SSDEEP

12288:SaR92J6sgRMLz7dpM+fAfT+Kc90ky5WmpYshXZPbGwidNpgQ:biJ6s9Lz7dplYfT+Ks0r5WmD9idNpj

Score

7^/10

banker discovery evasion persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5014

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/AxelBolt.net/config15-06-2024.log
Filesize
55B

MD5
062396f32a9e3a728aafecabf29bcc48

SHA1
3044aa24359d91e36165451d004d00af788bea4a

SHA256
1dcc24dbd4fcb26ab23c12a50d2808e1f9d7c7ad4d391e60b9a00cfd6a107828

SHA512
90e3684479024925424dda2b14e504d1c98e8a37b6633f10d9f1de09bc8105baa03730aa3d17c6b0b533335738b4055814e4b05f1873c1be3abe192dca05a48f

Download Submit
/storage/emulated/0/AxelBolt.net/config15-06-2024.log
Filesize
115B

MD5
fc846faefb637fb954b6a5f4a5ef3453

SHA1
4db9a5b93073a31a0536cd4b09cf773e0aebdea9

SHA256
c90ca42a47aa8c400bf63bab15670806709f4745177040b29e5ba84b1ea69323

SHA512
5293e4388ca68db6e4fbaae3a8bb1e449715ed75c1f4c9e6a251d323b0749cf1fb3182029db846662377959fe0d468920d3ceba2716a5d0e7745a257e3b5ffa3

Download Submit
/storage/emulated/0/AxelBolt.net/config15-06-2024.log
Filesize
76B

MD5
95e9e546909cb02abd2d78613ebe5908

SHA1
0708858753725136dbd5962dd4fd1ca2cd993ccd

SHA256
9f22dcf55f506b7ba429f7d6b3a7b87180e6e5dc71451741fd3284691fb6a5f6

SHA512
0fc1758ae11db232a0d4a44f8081e5e8b8c28f01d947a3e55dd678780f40dc8c7068d3d2f7a9a0330d1847ef8ad07999afec32dc1ed29f7aa59fe485c9daa94e

Download Submit
/storage/emulated/0/AxelBolt.net/config15-06-2024.log
Filesize
85B

MD5
2fa539807a709802bf008236b7b106c3

SHA1
016b53136058096f3a8faffcc122e5456c26188f

SHA256
0e3cede34ff629f6dee047f088c1324f6e2ba9bb82b222a0f471e3f590838c5b

SHA512
7e25e0e615ad99c85484b3e9c6a476727ccc91b7fb8fd28194ebf6e3b0c033982a719a3415845a68e8e9085b24de1f05ec8a7d224ccf03f7737d4aaf0e2df115

Download Submit
/storage/emulated/0/AxelBolt.net/config15-06-2024.log
Filesize
115B

MD5
a596b613a3bdbb2ed3cad88b5dd34036

SHA1
39af31f20cdc1367ffb76bee1d70457ca404261e

SHA256
8fad46ec78bb593a845d9e2e4b6aa46e4f0a57ca7b5655c4f4d2e2968ab5eedf

SHA512
1f13365c3af1ca156fa922217075e67ecdcb8b7a72e9826582bcfd242e7308b52fdea0c7fc53232b3bfccd104f80842c0c6704583deb05074f8549ba8960d0ea

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads