Analysis

  • max time kernel
    138s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    08-10-2024 22:04

General

  • Target

    32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb.apk

  • Size

    4.3MB

  • MD5

    fe43d214683b4d270c75faa3ed3cfaa4

  • SHA1

    3efb3d69053a9dc97bf111d82d76fc1c0adb17d7

  • SHA256

    32f5c4a5dcc560612400a4e29d144b69ff2ceb5ee678e39277d15d03df362eeb

  • SHA512

    b639dd2c22c95c66d0c262862714bc8a940fd3e61be5a1e0d365f41a01d20d59baeab419ae99594c68917ee4ccc733a921b092e8c28ab1bf1c121e5d2729c2db

  • SSDEEP

    98304:ohARrMC3WHigvIVq6gLCrnUP41XRbKSCcBcyeJsvMQ0DPHn:AC3cIgBPUpliCMV

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Aborts a broadcast (usually for hiding system events from other apps) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • app.zbujko.iqyqpv
    1⤵
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Aborts a broadcast (usually for hiding system events from other apps)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5133

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads