d7d7472ae765c96d33ec8e6251cddd59d3f93bd8d9be96f7311726e842337e61

Analysis

max time kernel
179s
max time network
133s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
17-06-2024 12:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Kavach.apk
Size

788KB
MD5

b415fb908e7c73f5ed47a585f92e79d1
SHA1

023b6c3fff93be4dcb3d04497bc2659a51cfa60d
SHA256

d7d7472ae765c96d33ec8e6251cddd59d3f93bd8d9be96f7311726e842337e61
SHA512

626be6ce6332cfd143c77e2cfd57d035d1bc074f288d808641cffe6d0a1ee6ecf44295156f2b9ec46c2ed1be03ce6f63323fbd3e32c65031d3e03a0e3e485264
SSDEEP

12288:M8a1a8LredeM60GN1jJWmyX5WmpYshXZPbGwidNpgR:ra1a2edeM60q1jImyX5WmD9idNpO

Score

7^/10

banker discovery evasion impact persistence privilege_escalation

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch
Requests enabling of the accessibility settings. 1 IoCs

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
PID:4281

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/service player/config17-06-2024.log
Filesize
39B

MD5
755924e0382dd43dd860d5a028275218

SHA1
d127395497111a774a950a846c385e82847ffd63

SHA256
3df8878cf5f5ca270911febb30902c3e2617e71900369e678ec116f0c3bc43cd

SHA512
8e7b445a3b4032eb03f11533303b09fd4d68aae2b1ce92bbf88936b19445966b1828e01c8daff6c02fccd98ecbfee7b8772ff9b1115a49ce85988bad2702c2a3

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
61B

MD5
1be852e57a5184e2df9d6897f02bac2f

SHA1
b2e611797d59f4e7beb5cf4ece353a0954584591

SHA256
2fbbaad27a32f675d7a51d6adc2b32015b4c703e7b13be772250c1df3bc84710

SHA512
177ca8472080f1e9e3bd1dddf0d438602d45f78387f7c6d0b707b737d829c3e649e2ff5e62f537d92b6088b0652aacfb7dfbbc6c4d0f156e95baa4953a646d96

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
62B

MD5
be8931efc4ffa7f9839df2c65f3af877

SHA1
aba92af726b93e9b8201fdadfe37d6eb3c61f724

SHA256
e4b8b17a96dbb627ab7a49d47b2eb4a6bd9c76f7536b139c4b065bf61a0ee6dd

SHA512
c77602771f93b1f73ff65859f68317d2cc59fad8e8ffeaf6f6cbc8b6e5f76e372c77cf3292749e99976a8cb6e334fc9504c56d5f1c151257be8050b61fd1ab94

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
82B

MD5
81f27c5ecd1fe23277f6a4e41bd8179a

SHA1
43a3a40d4d1bc519267904bf1bd336c73a7b1bd2

SHA256
81a913e01cdb50f35345d5e603e6fc153bb37a1105fbc3eee5440adaf7400713

SHA512
a445ebd941f117980488b7ab1e5f88c30d8bcca08a8b057b3342367d19600f2086ef2195b730c4d6caaadf60f908b92199e5150b284e10deed9b708f7e712096

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
85B

MD5
973199445e24854edfea03d483d564fa

SHA1
05f205467f05e77c2562470d5e196a74939f5e81

SHA256
6608a72170deae61e935fbacfb8631cd28a057771d44f95b75e719772eea2d62

SHA512
438ac260f603611c18740e6c93f19a30b5cc26784bd65d0478d9c7be0f8ca43498c15a7bc58cc20a078997351b6d979285ea536901f9e86cf0ed611fe5081b75

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
68B

MD5
dc98c81fdb615fa21bae37f7aa656c19

SHA1
37ae244b854f09cb5a264bcd697cbc7ba6d6c951

SHA256
9116af032a6de1975ac84c190da643c2cfb275f7d7f96b45ebd990ab884a1885

SHA512
b3d923bc783793bb513f3f11767ec742e1893f51b13a24c66bb43aff44e483ec9b312ad792bae01b0f59a731112e65a2a9db70b587367ca809a89c51971f4f8b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads