Analysis
- max time kernel
175s - max time network
136s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
05/08/2024, 22:02
Behavioral task
behavioral1
Sample
1abf0050c521082a3c63fec70ee6a1ff89322a23e56da945cf67fd8528b42c7d.apk
Resource
android-x86-arm-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
1abf0050c521082a3c63fec70ee6a1ff89322a23e56da945cf67fd8528b42c7d.apk
Resource
android-x64-20240624-en
4 signatures
150 seconds
General
- Target 1abf0050c521082a3c63fec70ee6a1ff89322a23e56da945cf67fd8528b42c7d.apk
- Size 760KB
- Sample240805-1xtwbatdpe
- SHA256 1abf0050c521082a3c63fec70ee6a1ff89322a23e56da945cf67fd8528b42c7d
- MD5 892d8b6c771c00da44e1c4c6cc3f5723
- SHA1 0a4b3f7c089326718782a970b0275d5f53cb6299
- SHA512 ef12dffbcfda7c21d5a5acc09b4e4f6087bcf479e83a0e0b1313050dae8b5e86416d253e636a5fddf5341730adaff8ca7ca49eb014941d64ac5d1433d1012c76
- SSDEEP 12288:cB+Q8a1a8LdeiB4WKZXTf5WmpYshXZPbGwidNpgZ:cAa1a6eilKZXTf5WmD9idNpG
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4463 cmf0.c3b5bm90zq.patch - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch