Analysis
-
max time kernel
146s -
max time network
151s -
platform
android-13_x64 -
resource
android-33-x64-arm64-20240910-en -
resource tags
arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system -
submitted
07-11-2024 20:54
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-33-x64-arm64-20240910-en
Behavioral task
behavioral5
Sample
client.apk
Resource
android-x86-arm-20240910-en
General
-
Target
client.apk
-
Size
760KB
-
MD5
7f88e90adbe24dbc137ed4b4bf341bf4
-
SHA1
7642e800215660dca38706010963efe84e8918d4
-
SHA256
df614aeface79c259513d736bd030c606c1b152e76936be9daef69e2a01cde86
-
SHA512
543a8c6c8e7d20e9bf000aa40e54c3dc996deea027b6aa1a6dae95ec8875ed55326b8a56398dc25cc85f2140505fabe6c1a1579e26cde68e340ab5d9d8aebe59
-
SSDEEP
12288:JfOV7Raa1a8LzeV3gSGHu+5WmpYshXZPbGwidNpgw:Jm+a1ameVLGHu+5WmD9idNpj
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39B
MD548de402b6cb152ae3739b5a98fc7ac68
SHA12ea8703636a78034fa558289d00ea54275bb78da
SHA2569b5e27e569f6ecdf08b834baca455fe1a0f22fa2d57f6d7301b9079c90ddc7f6
SHA512d4672675d59b0cb8ab9652ba78cc4f38216801960868687f857a336c5cd4586b52341e6283e010342f38538c55b7b3fc1c205618beba7b20c8ac9f34bf904190
-
Filesize
59B
MD557d78f88e85f1f7589ca45a4fb0ed67b
SHA1e398e26d7c92b90df55f6fe0a49cd4ea0ffcb1fb
SHA256764399e0a3f4a1ff2c5c65551ef8cfe346edf57acab4819db1e82e222c78ecb2
SHA512acdf23a01357ceec1270a08f7262b630d1765e7325d6a857591b070ccf9db3ca9633da07ec60ae71818221996a7d69645436b0ad408c9c76edff4ab9741e532e
-
Filesize
55B
MD58a399840d2721070bbb3c3537bcd3cb3
SHA1bba3518c72ed507b19327cf46837e929342b4f7f
SHA25629831a9e81eb8ccb3b0e5e74750f2dc59995dc12f7dadb94769c6c474a3c4fff
SHA512d29a126e0ed75a4b2686022d8efed7994d15c2e8e2d0f5f34da3fa0544118dcd844379be914dcec8505274912ebeaae3f6082ba8bc819ae67f57d87e746f392a
-
Filesize
87B
MD5d08e6e0bff233fd557709dae354514a1
SHA12bb693776defa488be82879a81b26c5b9dd0d9d5
SHA256a92f0725236aaf4307746c077596091facdce05b703c7a4c6ede76bb227effff
SHA51299b95a666e4bb3f21b1d02b0c3f89d202fb873fcf3f27a7f799c23a0ed994d2609d545e3b4c8c11638c73cc79351394538223c7485125652cea1fe4c947653a5
-
Filesize
135B
MD5de7810794ce396021ec4db8a403418e4
SHA1163e0ea8b701568195646af8cb4b78224f39f5ac
SHA2569b57d7fa43991cff88b40009241d51aab6272c4a20abbfe32e1e0496a91e8fb5
SHA512ff7ba12a886e073fc88383995ba88d2579d7e53db8d969e4807730515a8e610a7abd10d0983f5d285b17be265d0b3fec73d7b7ebe846bf2feb6daef9b4035369
-
Filesize
85B
MD559c79a0de6f3bec2ee733bdd69794b64
SHA13e4668946a5088dd9b85ee174dc913cae8420eb3
SHA2565ddd50a799269f1bfeb18f31d5e740bcdae40be930616dbfdd398d50d3bbc7d6
SHA512d96a285736d72eae66e50ed3acd67b3d260b101e5e4ccca8acb7181c1fec577c029f1ad18f28113682854b861b87b8fd70434d39dd22ef4be45c1fb10a71130b