Overview

overview

10

Static

static

10

client.apk

android-10-x64

8

client.apk

android-11-x64

7

client.apk

android-13-x64

7

Resubmissions

17-06-2024 10:06

240617-l5jmzszejm 10

Analysis

  • max time kernel
    329s
  • max time network
    330s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    17-06-2024 10:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    client.apk

  • Size

    760KB

  • MD5

    ecff9130ac1fb9d1ed7c1e5ff1e7a5f8

  • SHA1

    cd06d66f89314bdba236700c070120fc320f03b0

  • SHA256

    84592974fec5ac1c1f28f516700ac0ea5065a602389c44b2015b69e1af6a7579

  • SHA512

    6c04f69dff6dc9057eb8448dc0ba3d39efb2b488bdecd8caa7f5723bd7349cd45346d457ee84377d2cf7c82ea1ad29940d02c71d3f0aae5ea5d9ee7ca0e644a3

  • SSDEEP

    12288:57OWDqta1a8Lde7VWikVG5WmpYshXZPbGwidNpgnQ:5aW0a1a6e7EikVG5WmD9idNp8Q

Score
8/10
bankerdiscoveryevasionpersistencestealthtrojan

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
    stealthtrojanevasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Removes its main activity from the application launcher
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5171

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/Internet/config17-06-2024.log
    Filesize

    61B

    MD5

    188375807300ed66f5d9bba886ee784c

    SHA1

    d162b06b9953391e808488a2f12a32a5d6ad82d1

    SHA256

    364d5c57e18c169a5777e4049a1ec28107e4e2adad039c9ba13b109fa948e4dc

    SHA512

    aca99194ebe57b6a57801d394a4b36cc1f2a11786dff3a74fe9a6715f308d484dc6288ecbd693dfd2ecac85c07d7ec101727227375a3d3d5ebcf52a91f079c0b

    Download Submit
  • /storage/emulated/0/Internet/config17-06-2024.log
    Filesize

    85B

    MD5

    10b983399f648b8a73a036d291481b12

    SHA1

    5ff12264bb2c81f6b9243ec5d484d96a66292f23

    SHA256

    140e0bd87d4c1c9718eca56d99de55c4ba7ceb952ae0ded9023a39f0173b56e7

    SHA512

    31769dbd3186146d817d07608b590cf182a5e8fc02c1d71dee6634f76ab84e6b6d5fe2c0ad573fae02a4f119b340dde10250658465cf16501b41ac7a72c0d92a

    Download Submit