Analysis

  • max time kernel
    6s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    02/10/2024, 22:11

General

  • Target

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44.apk

  • Size

    1.6MB

  • MD5

    0c4c035074b7bcb34ea9ec9710ed45ae

  • SHA1

    974820d616710db6c86672c60e3463c41b849dba

  • SHA256

    a6a41b7618162fef087884768c8528a43316a0ddde5a9455466ba8477a298a44

  • SHA512

    639116ff6abb994fe61ef1a811a835c87ef8b0d6a24cfdc5dd9a4f22cc42f4a693b973e9eb5a6bc36853a036a8047d6c750c1270d7f26b29766d5550a5bd3924

  • SSDEEP

    24576:x7Q7bScHHKl7TgLXTDtxuRCYp68AObjGeSxxT5OWmiUIpqZ3xNW5co:xuScKlX0NBYY87YUIpqZ3x+J

Score
6/10

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • c12.h2.u3
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:4643

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/c12.h2.u3/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

          Filesize

          8B

          MD5

          2162306b18c403f547c05dd1a07361a1

          SHA1

          652a6cbc8fda7d0b6e9046ab9844c83f6c004b90

          SHA256

          20d1249986e40fb972ed2afda594456a7052f947151bc0b405aa019444177666

          SHA512

          63b51d7a6c642289dd2059344b80056910d6072e5b932ea36f256a1b888a4bccf13e46ebdbb24c9313954e719639c606b200e47520e2a2711fdb79c322e726ca

        • /data/misc/profiles/cur/0/c12.h2.u3/primary.prof

          Filesize

          1KB

          MD5

          a0cc30bb2bb38bd3e5463bb4c843ce92

          SHA1

          e00e542ad810da305952403e2981c46405a62907

          SHA256

          f300de975149ba952073cb5e41b1d5e3cf0f167b9cf5aa5b781e74b6fe6b7105

          SHA512

          993e5596a9a95e57ca316860a6484388651447696f22b28cc47849ea0d5c705a90b35f3ef8f3ef8957d3140110b1c3b9ff723f702f0431e7f5c814152552c97c