188e22954752b553661f0ea278c7020bda5917e47ad5c196567152720ce24e94

Analysis

max time kernel
4s
max time network
162s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
27/06/2024, 08:22

Target

188E22954752B553661F0EA278C7020BDA5917E47AD5C196567152720CE24E94.apk
Size

3.8MB
MD5

ceb840a25b34ab2a00ab12fa28664e7f
SHA1

1933ae6f51d060e3235b6ef3ee295370928a8bc8
SHA256

188e22954752b553661f0ea278c7020bda5917e47ad5c196567152720ce24e94
SHA512

2aee1abb502438a36aec8db573c7bf4a1e82a5ab14df01326a4a938f628716df41bb4db1dabffc45b1a85b5ab3e302a73363195a88f0611f9e4e9a6c3d5ee2aa
SSDEEP

98304:cmLoGrV975fgBZoqXGSGESIOTmGI6MxC5lYdNr5ht8g:cmLoGraBeqWSAK3U6dP

Score

6^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	picox.aura_i

picox.aura_i
1⤵
- Makes use of the framework's foreground persistence service
PID:5003

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact