Analysis

  • max time kernel
    6s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    02/10/2024, 22:11

General

  • Target

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44.apk

  • Size

    1.6MB

  • MD5

    0c4c035074b7bcb34ea9ec9710ed45ae

  • SHA1

    974820d616710db6c86672c60e3463c41b849dba

  • SHA256

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44

  • SHA512

    639116ff6abb994fe61ef1a811a835c87ef8b0d6a24cfdc5dd9a4f22cc42f4a693b973e9eb5a6bc36853a036a8047d6c750c1270d7f26b29766d5550a5bd3924

  • SSDEEP

    24576:x7Q7bScHHKl7TgLXTDtxuRCYp68AObjGeSxxT5OWmiUIpqZ3xNW5co:xuScKlX0NBYY87YUIpqZ3x+J

Score
6/10

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • c12.h2.u3
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5052

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/c12.h2.u3/files/profileInstalled

          Filesize

          24B

          MD5

          1986688c5e4056d79334ecc16ae5e84a

          SHA1

          8d74a3419ef432d34f585acaec1ee6f0fc42a3dc

          SHA256

          7b2e83f66cb67fb368953f6873447de3f2a3c894c7cf6b7f07f6274fc6f850f1

          SHA512

          57e09b290b58a38b03e433966d7bd23354a56c3da778503feb8ce9157fe9ee8ff1b414a343f5d6e5725ef32e7c956906de8d4b8d190e52d5bbf2f801e1634d5f

        • /data/data/c12.h2.u3/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

          Filesize

          8B

          MD5

          4b579ae70252daaaac427854d749ef9b

          SHA1

          56ce11e9b684b52adccd66ea3fcd45fa633fd8c5

          SHA256

          2bbacbbd150baf40df3f22dcb3e6437612660479d5acecb41c7579f7dc4a2aa6

          SHA512

          9ec166d85139da0e476e9f4950f9d35b8fa3bdab84a5d56161d5d78e9622520a2e79a2bbf82b71c8d61e7ae474e32f02d959fbe916a45621038935a0a34794a6

        • /data/misc/profiles/cur/0/c12.h2.u3/primary.prof

          Filesize

          1KB

          MD5

          a0cc30bb2bb38bd3e5463bb4c843ce92

          SHA1

          e00e542ad810da305952403e2981c46405a62907

          SHA256

          f300de975149ba952073cb5e41b1d5e3cf0f167b9cf5aa5b781e74b6fe6b7105

          SHA512

          993e5596a9a95e57ca316860a6484388651447696f22b28cc47849ea0d5c705a90b35f3ef8f3ef8957d3140110b1c3b9ff723f702f0431e7f5c814152552c97c