8a91bf9ba1250e5f0977384101f5ff3c1d7dc121e7ed304e2580bac1082b7d61

Analysis

max time kernel
178s
max time network
156s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17-06-2024 12:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WhatsApp.apk
Size

786KB
MD5

572589492cf56c19140b0f35e5205dbd
SHA1

8fb0fe21bb0f3ee43702167c5b57f76397882264
SHA256

8a91bf9ba1250e5f0977384101f5ff3c1d7dc121e7ed304e2580bac1082b7d61
SHA512

ef08cf54f52b21826cddb9c1784c667471851687a14c907786b9df21201df27dc9f830555c8d55dda2c2b0249bd2e1e88d4552cd53e503ab75838b97c3399101
SSDEEP

12288:QLcfa1a8Lzezw+8RB/lwlW75WmpYshXZPbGwidNpgY:ta1amebkBtwlW75WmD9idNpf

Score

7^/10

banker discovery evasion impact persistence privilege_escalation

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch
Requests enabling of the accessibility settings. 1 IoCs

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4268

su
2⤵
PID:4318

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/service player/config17-06-2024.log
Filesize
66B

MD5
43dce59bc069e6a7674bb60cf0e51025

SHA1
bea3cf820d5fa5647d45823833659c7d11bfe10c

SHA256
41f7ad895385baa9150d5efb4a6109b4f1d44546bd65ed53d3e535ec3846c06f

SHA512
c6d8a4faa51d902bf60754dda257c199a73a28d438e84aa7272a2c2884a0b4bcc9446108107520a321ae4000598245e9636ac3be924c55cd254f0ced77fcea6d

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
62B

MD5
13de3a6c342dfca4b3d485af4c017f38

SHA1
10c617a6c3384b64fb219b0d12dea1f17145796e

SHA256
92af9bc332631c6b309c8b32197fe7f174a7f74be717879502e750152b300fe9

SHA512
b961f5a3acb24bdfc0219212653e2b031cb3e9061afcc9632216a4b28d847264ecbf3ea8034d05e30d49e19483f08c57773cd7c3a92b5e926c546f2e3d2be4ec

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
61B

MD5
7f365673c96bb74f26aaf7fece4e11f7

SHA1
fd7b95a3d01ea0e113abead5c7ccc186b7d26d47

SHA256
a9d338adb9f76a421e0810dd7e2d99d7cfbf8229a95c1837fa1defd713f4834d

SHA512
8447d4139a57f4c6f6f39b5e3ed504fbc03aabee99fff65bdf10c5e433aefd3e15e55dab6e63fb7a9a7f51c104df5cddeae24b25cdf519cfaaf4fca4c1c6b281

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
63B

MD5
c75ecdc9e8b8da90ed47fa4cd2858f63

SHA1
ea66eebc03f74f4852175734f4e6ce66ac4319ff

SHA256
cabb5b1ce2c94bd29fa710bd48ad96d97cf2fe90acbc8d40eb4c3b17c94d98e9

SHA512
1b9d3a50ed11b85ab029e52d7057d08b316fa68909b2cf11f832fb5d42d46687bcfac86e4b2f148832906efb7c822b0a3484129804f75a72a93525d4900f697a

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
224B

MD5
ead7bdd10e0455eb7ac727093466d429

SHA1
b046cb9c05517d71a2f3286d367a5b11d54b4e41

SHA256
03e8bd551424502a218fc56b5aada48f0e7fce52b0e936f1d380bf2528b2ffa0

SHA512
fcb35585847f0a6eba10bb8f7cdf23c54b669c38a286afda1d0541847c6437aa038c058cdc367e4911d6a2fe4d8916093e2cc82239168dc4de522f0fa1241dbb

Download Submit
/storage/emulated/0/service player/config17-06-2024.log
Filesize
63B

MD5
89f3a783146e0e29a046b4b5288cd8ca

SHA1
0daeede8419cd6de8562f05ff2d9d02e532d7a56

SHA256
bf188f9041f48f6fc4ece64d26c2bb2753ec9640b9da9b1614ee1b952ed7c388

SHA512
6c802fd30280da6d2b20294c9357caf48de4111a9eb4c18de5e50c75388d3ff12bb3dc956defd157e89e56f4c9553eeb916bfcd7005cae2aa6376cf6935ac39b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads