eb1f929af84332b7934cb75cfa0d873d8b69380d21a77487b9a1a78b9a893403

Analysis

max time kernel
5s
max time network
166s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
27/06/2024, 08:20

Target
EB1F929AF84332B7934CB75CFA0D873D8B69380D21A77487B9A1A78B9A893403.apk
Size 3.8MB
Sample240627-j8vtbatclk
SHA256 eb1f929af84332b7934cb75cfa0d873d8b69380d21a77487b9a1a78b9a893403
MD5 ac49d0beb4723f1dd274064bf04c6d46
SHA1 05bcd6668b37f8946e56e56bac8f597364709f0c
SHA512 122466ce0342d7b599addc16f32cc940216a4942092455ce37c294031af83c4abad2659b4e82b6e71d239908b5cec5b81c5eb050e9f166821a1bdaec34f441bb
SSDEEP 98304:2mLoG6W6i7emg/406mZcqQ6Z7sqGOW86IOTGGIohMxF5lodir5htR1:2mLoG6vi7emg/izqQ6Z7sqGO+S3osCdO
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	picox.aura_i

picox.aura_i
1⤵
- Makes use of the framework's foreground persistence service
PID:4928

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact