Analysis
-
max time kernel
148s -
max time network
149s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
07-11-2024 20:54
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-33-x64-arm64-20240910-en
Behavioral task
behavioral5
Sample
client.apk
Resource
android-x86-arm-20240910-en
General
-
Target
client.apk
-
Size
760KB
-
MD5
7f88e90adbe24dbc137ed4b4bf341bf4
-
SHA1
7642e800215660dca38706010963efe84e8918d4
-
SHA256
df614aeface79c259513d736bd030c606c1b152e76936be9daef69e2a01cde86
-
SHA512
543a8c6c8e7d20e9bf000aa40e54c3dc996deea027b6aa1a6dae95ec8875ed55326b8a56398dc25cc85f2140505fabe6c1a1579e26cde68e340ab5d9d8aebe59
-
SSDEEP
12288:JfOV7Raa1a8LzeV3gSGHu+5WmpYshXZPbGwidNpgw:Jm+a1ameVLGHu+5WmD9idNpj
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64B
MD5526051fbd07842577739c98b71e027c5
SHA128c29da3d81b907b646925a93bd6b2b161dc0539
SHA2560e522bc4e7088e647a1056fae7f1c38653001a360a2f2165527dfafe836d1b0c
SHA512cc4161da2e235a488d37da13c4abcf1661c9d25b07cac8d607d5e7c7201e39f46ed17534657051de9576a0ae8a34df4606becf284ba11d1366d2794fc5fb8cf8
-
Filesize
115B
MD55f776981fa2dfa5aeed3aa6fa9f7441a
SHA1782b713e992c3d7545311b70d28f6339aaa55942
SHA25676214bc81aed1d08f646e1094969f938c4050ecd87160f37341da2fc1cfdd5e5
SHA512af1057160ff14e0f48dd9c04cfa9c4970d96f90583a5395f853e2b5995040f88bd59d2a64d8431282752e1e46599f4222fe6ae84312cf8d63d85f9dd2d06e476
-
Filesize
63B
MD5d6c7af37e018eba377820f6d46564e3f
SHA1adbe1500944c56717a7b60f96f29ad60906d09a5
SHA256a97514d22943a8e152a59ed806ee11d6ff226b2f256995fe43bf82498090379c
SHA512940c638547b27a70cd29e4dea3091d9b9ff85ac8481d5ebb541a86989a67e025f134a4ccc25f1c4ce2a62d8f12e29a3d6515630395525d7589eed5ba863ad06c
-
Filesize
60B
MD55219d1ec3cc7c9b78c45a1802e8b09a5
SHA1475f025cbe4231120b46035a1480c9d11c3ea2d9
SHA256e405dfef13ff2d2076fd0df9d0bfd82d7045e26e8b31c113d0da6b784d17ecaa
SHA5128f78f2700802e5e37cb2acf9da4939286ff3707e0a261ea98e40d6acd530c3a763a0ac8ace4fad408ffd420d787c48ba7ee04497d0af8e2b07cd29bd759dfeaa