Overview

overview

6

Static

static

6

a6a41b7618...44.apk

android-9-x86

6

a6a41b7618...44.apk

android-10-x64

6

a6a41b7618...44.apk

android-11-x64

6

Analysis

  • max time kernel
    6s
  • max time network
    150s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    02/10/2024, 22:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44.apk

  • Size

    1.6MB

  • MD5

    0c4c035074b7bcb34ea9ec9710ed45ae

  • SHA1

    974820d616710db6c86672c60e3463c41b849dba

  • SHA256

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44

  • SHA512

    639116ff6abb994fe61ef1a811a835c87ef8b0d6a24cfdc5dd9a4f22cc42f4a693b973e9eb5a6bc36853a036a8047d6c750c1270d7f26b29766d5550a5bd3924

  • SSDEEP

    24576:x7Q7bScHHKl7TgLXTDtxuRCYp68AObjGeSxxT5OWmiUIpqZ3xNW5co:xuScKlX0NBYY87YUIpqZ3x+J

Score
6/10
evasionpersistence

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence

Processes

  • c12.h2.u3
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4269

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/c12.h2.u3/files/profileInstalled
          Filesize

          24B

          MD5

          48de99f5feccadc20a7b2926fa102e86

          SHA1

          74b1ffa6230aec75c5a7104bf393c60754bd5cd8

          SHA256

          b2bac8e9a930f28b03e7e32458f4f47f52cda5d362cca18457098c94def29fa7

          SHA512

          34cbeae541fabe7bfd4cc6a4d9cb4e9800e2dcacca3206a7eb05c7162817de596cb279ec3754f75f78c327277db16e3bf9489c69ad50d312e6527c3494be219a

          Download Submit

        • /data/data/c12.h2.u3/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
          Filesize

          8B

          MD5

          6ddde210cb25c03a6c8e86b6bb38c345

          SHA1

          b519a78e250599ed6cc49c16c6335edb7d5489ad

          SHA256

          a4d38431360d59d59ec076687170d031bbe5936a91d3b1065f832a759935727c

          SHA512

          117fd1aae854469eae83515b6b718fa90540783098c756823965a80bc30f1eb0907b02eec939a5f95102e7d3320120c5379dcbac523e27429dcba7e329eecb84

          Download Submit

        • /data/misc/profiles/cur/0/c12.h2.u3/primary.prof
          Filesize

          1KB

          MD5

          a0cc30bb2bb38bd3e5463bb4c843ce92

          SHA1

          e00e542ad810da305952403e2981c46405a62907

          SHA256

          f300de975149ba952073cb5e41b1d5e3cf0f167b9cf5aa5b781e74b6fe6b7105

          SHA512

          993e5596a9a95e57ca316860a6484388651447696f22b28cc47849ea0d5c705a90b35f3ef8f3ef8957d3140110b1c3b9ff723f702f0431e7f5c814152552c97c

          Download Submit