399bde41f7bbac87f4825ed211a5baf4ed6192ff18081a873b190fb0cb63b200

Analysis

max time kernel
8s
max time network
135s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
23/07/2024, 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

399bde41f7bbac87f4825ed211a5baf4ed6192ff18081a873b190fb0cb63b200.apk
Size

4.1MB
MD5

34f06fdb86fa8c61ad2e1314aab45d32
SHA1

55209f5b86ac1e948a1d754926ece890a42504d7
SHA256

399bde41f7bbac87f4825ed211a5baf4ed6192ff18081a873b190fb0cb63b200
SHA512

4ed3f96fe6717cf37f1e6ba02e8c065949e37af1dcc307670ccb221788f34934c7911ba301649938ee40f17364b7b5af037e3ab096c2d1b31d57a9909b997ef8
SSDEEP

49152:5QqYy+j7m05Vn8gaCdcjd9I9I2gLU93i0rh935rw8hO/nDq90w5P80qkT9dBboI:ia+Tb9j3i0rh7rwMO/nDqye8FAd5oI

Score

6^/10

evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	app.limits.gateway

app.limits.gateway
1⤵
- Makes use of the framework's foreground persistence service
PID:4584

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/app.limits.gateway/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/app.limits.gateway/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
32ba44d3c07824d3c6e0871a89c48f01

SHA1
d2fa99522475682a70aaad8de77d0fd88caca6d1

SHA256
8c84dc7671dd58e0457238ae5f4c22717dcc423bb297f2df4258d6efa34e3bd3

SHA512
c48a97af0f2d57dbb095c6bd9d71608f34a0fe61e9d11b1187bf2774f8149d655cb98095ce38d7d5ccf8abd9cd4e20eda484ac05b7841a766720020dcab0cd3e

Download Submit
/data/data/app.limits.gateway/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/app.limits.gateway/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
275cd680151e10af934ba03ec675d679

SHA1
715711128b0d5729f39a00634fdf723945552e73

SHA256
b14733237c2656b9c2bbc1cdd0f3aa16c62ca930166e8b36b9b2f58c440a2218

SHA512
b75ad1f8f826725b483700b3c5c5a50f31dbd134e56d83e2cba5870ca23c7a7a2b06e38ec2f1f0a9c3adfe77946b8b3724f6be5e90a5c70aaf94e90b1b5066ea

Download Submit
/data/data/app.limits.gateway/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
61a77c4c5a10767fcb27eb8a0d72a99d

SHA1
75b71d66d31d0bcfe108de4e414d7b0679048efd

SHA256
f241144fbe37cb5303acdfc4fbf2148997a5a006e55100306efb9a4cb9d81c17

SHA512
6f47ac9106093861d97b447234b1dec1ff1bf69bfc8b13801eb4aad4ce39949d306dcf0be5b6900ce14bb30019312899bc35feae7aa5457dbbeea11e89a4ba12

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads