Analysis
-
max time kernel
88s -
max time network
87s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
10/10/2024, 23:34
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-x86-arm-20240624-en
General
-
Target
client.apk
-
Size
760KB
-
MD5
66270fc1ebaff194ac4d0b327d8455fb
-
SHA1
393fb7b7e929a3cc606b4567442d3675cea3c134
-
SHA256
56cf855e8c2df6954e1450f72675e3fc4db220528300246b0d13d1c0e130c095
-
SHA512
a7531fee017032f27a9d19af8790013f24910037a960d5a63c8e86fefcdfb9aad3087c3e408e8ac83b93d7fc507a63378589642c2941e63a15352d9a9a6207e4
-
SSDEEP
12288:dmfGF0a1a8LrePvDPD48+5WmpYshXZPbGwidNpgu:dga1a2ePTD48+5WmD9idNpl
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39B
MD5b0c1907b751ca860f62e05294e6ef30f
SHA1ef7c26c008763ccd97d6e57caf3daadedf6cfbfa
SHA256aae70488f6a85fac328a420d478bd4cd68a0b8995aee164ed456e89a42fca980
SHA512e9bbf4fe84b45c98093d8fae06704ef0ed4aed60946b71d29752e265d1d26c28e0a650fec2b324526101a5c1bbfb5ca94802475e7b7d2ba811ccdb910b989d06
-
Filesize
71B
MD59dbd5d22a1f24b233bebedf0f90a5784
SHA16853261a306bd798e2ee90d8b061028ce01dabc1
SHA256826893e4959c2be37d99243d7c37055c8e3d5406075e060ab8dd7779676eea29
SHA512d73433c3f3e75661de718931437cdbfd9b5e4d10c897400ab827a8bb17a0620d35a7053079f95a87011dbc894380e4af1cbd38564551994638000e412bf238fc
-
Filesize
67B
MD57b906f33bfe92cf2059ec85abd17f9fd
SHA15c36197d1b0f035f8a746a4077bf8239e9a49a94
SHA256852a0493de55eb4706bcb8fe7a1ea054b15420e03e42a02c62789c7aa1c39189
SHA512a9844eea6fbd8db5e4d8ceef312100d7b7c3c6e138f96218288efead2caa6ccc0c05e1506fac2033cef4978c99e182b9037bfc32c64533abed2a9ecbb7f8262b
-
Filesize
99B
MD57b30f4f552bb832f1b7242f29b5d7766
SHA1ab7fc29d0958c7fc3a75fdc72dcb1e922744893a
SHA2566a45065e872413f01a0fd7ddf6e0406d335b68ba6af9d408e11c4d74a0c006ba
SHA51215d0f105aef81be989a2af7d415f69fcf3f771698e56eed58b20eb57e3584ba5ad575d92a2888666a7b0ef766a045590223be469eaebbe8c0746cfcf5b584f67
-
Filesize
135B
MD5ad89e52cc4d1dfe754172237653578f9
SHA15a302e4577bed77fca8b9e225449164dce206675
SHA25631e1290d77af1429cc52f873316b53959c8f311cfaf999d734e15c71cf238484
SHA512952fdffc40a3cbab857129e2a63bc720d57785a54f6f5bf29d95289b4798e216d6577d9f78ad01cc6886ee7ce4b283cebbbbbfa4e5e9e84b62450345a93b5a6f
-
Filesize
182B
MD5b66f73988fe748c6099aa16ace2c16e1
SHA114966ee0fcc0bfcfa631c581602ed411b02ba661
SHA2569d8536afba464995882639dd490a96572406a09626f73a2036205b3e4cec8ac6
SHA51267c2e031c1ea3ff565cfaefa72c97d0789839ff3f4be377e092f3c32391a97542804347f7b9d3e3ed103ddb12f3418401e5589f12244eb961f58c758f1d7852c