84592974fec5ac1c1f28f516700ac0ea5065a602389c44b2015b69e1af6a7579

Resubmissions

17-06-2024 10:06

240617-l5jmzszejm 10

Analysis

max time kernel
134s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
17-06-2024 10:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

client.apk
Size

760KB
MD5

ecff9130ac1fb9d1ed7c1e5ff1e7a5f8
SHA1

cd06d66f89314bdba236700c070120fc320f03b0
SHA256

84592974fec5ac1c1f28f516700ac0ea5065a602389c44b2015b69e1af6a7579
SHA512

6c04f69dff6dc9057eb8448dc0ba3d39efb2b488bdecd8caa7f5723bd7349cd45346d457ee84377d2cf7c82ea1ad29940d02c71d3f0aae5ea5d9ee7ca0e644a3
SSDEEP

12288:57OWDqta1a8Lde7VWikVG5WmpYshXZPbGwidNpgnQ:5aW0a1a6e7EikVG5WmD9idNp8Q

Score

7^/10

banker discovery evasion impact persistence privilege_escalation

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch
Requests enabling of the accessibility settings. 1 IoCs

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
PID:4361

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Internet/config17-06-2024.log
Filesize
66B

MD5
2f9e6d57ba40a4dd819b2770fcffccec

SHA1
f736d680fa82d5b8afbebec49016354b07f537af

SHA256
2b1b0ec96daeebfb1176309d7a791e749ec41628e67efcda1fba3b07c233bf2f

SHA512
1a88805dfbb041a92eb83a920e7496ef6660cf96cb34b311af6f0b5935b664873a2ff1c3f969bfccb899b06deebc6db95ad248396368612f963d56cc4db3d2e4

Download Submit
/storage/emulated/0/Internet/config17-06-2024.log
Filesize
62B

MD5
bdb552d0eab254f962b59e458bac8caf

SHA1
776cdcd1558a2e72ff91eb8edcdba36c184569cc

SHA256
e0f9f28ad57c625fe327fdf68b3917f052a192f6c12dd9822505c374320c631e

SHA512
56564c853a2eb4908f9922c536168a46f6114d4283e0757b8bdac3b801295e7b3be2fe7e3ab13a1bf7e9debd7f979274c251c81a6cab5b8b121dff6ff3e42f2e

Download Submit
/storage/emulated/0/Internet/config17-06-2024.log
Filesize
94B

MD5
4c154683405a3d7df0502de492ff08b3

SHA1
f77d3c909dcb973de62486d6f6b034ff866b0650

SHA256
7bb08de4c5d0ca4c510458bda868626394a0370d1047b8ddac4e6f3227b1d498

SHA512
b32f16a49348be7f45a6f8f1ff13fcfa5ee9bc05e549487e988f06258470c293e44efc2cb4812502dfbd7a8de9af9f73f7a997ee11b6a6f06bc3a1cc727a361c

Download Submit
/storage/emulated/0/Internet/config17-06-2024.log
Filesize
135B

MD5
0c5e4b0172641d5f32d1ad10cafac681

SHA1
8b949928003369a62f08d047226068e14bec2e9f

SHA256
418b2090b6d31c3b06fa3b85de62a8f4e2c4046abbe655c4687ec90dac49642e

SHA512
ccf761e9495e9e34d6b25fc7592baad939e8277131e2805662e36ff477dac38a1da5fc04820cd91a9cf115df225b645700fa04da384b18033e077e8b9a6545dc

Download Submit
/storage/emulated/0/Internet/config17-06-2024.log
Filesize
56B

MD5
0383058a22d6bf60ba6743cc22b5d836

SHA1
087a70f91f49debc98d224cc7da23f20d1f1348b

SHA256
bdac29c4338239a3c8325d98b7dce0a1bd4c2c871b5c100051e510253be69c1a

SHA512
f3e15d278f7efe4675d3ad4660561a47b8758470635646b3cc61db00f651c0a609c1b4296b5b31683a58ba8d42b418c4c8833c29cfe9f4e487459dd00fe5d113

Download Submit
/storage/emulated/0/Internet/config17-06-2024.log
Filesize
85B

MD5
e363aa694193b511c582247ce36c6f99

SHA1
f584fc987758223d93f3755d3a4abc754773a954

SHA256
0fc0d062b920c9b04b6b0856eb8ab153dd29de834a9aaa633ceeb89fcc9578d0

SHA512
a099ab379e0631b79447224188e0968286def95740cf077db705089d4b5e641a21916e583d8377d395629cb79dd37741bd72f35ede1c23044d87ceff09ec6c7a

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads