Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    18-11-2024 22:10

General

  • Target

    6f776aa6a65111d37c63d4bc16eb2fef12ab53a41b4d93469c969f1e5e81484b.apk

  • Size

    760KB

  • MD5

    72bd35f4e36f366e45a88456c2b740a3

  • SHA1

    5548bea0dfee8a3dbd83671a9881a67a6cfb45e0

  • SHA256

    6f776aa6a65111d37c63d4bc16eb2fef12ab53a41b4d93469c969f1e5e81484b

  • SHA512

    0065df0dd1281be9ad4e32a54f8aefbd5d41e166a020b0f994494aeb5788eef3a50f3fa3dc806313dc06b1a5843ad190739188808b790983c8c6568011391bef

  • SSDEEP

    12288:mf3+nlsa1a8Lre8b6JGzf75WmpYshXZPbGwidNpgIO:mf3Pa1a2e8aGzf75WmD9idNppO

Malware Config

Signatures

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Tries to add a device administrator.
    PID:4786

Network

  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    216.58.212.238
  • flag-us
    DNS
    www.youtube.com
    Remote address:
    1.1.1.1:53
    Request
    www.youtube.com
    IN A
    Response
    www.youtube.com
    IN CNAME
    youtube-ui.l.google.com
    youtube-ui.l.google.com
    IN A
    142.250.200.14
    youtube-ui.l.google.com
    IN A
    142.250.187.206
    youtube-ui.l.google.com
    IN A
    142.250.179.238
    youtube-ui.l.google.com
    IN A
    142.250.180.14
    youtube-ui.l.google.com
    IN A
    216.58.201.110
    youtube-ui.l.google.com
    IN A
    216.58.212.206
    youtube-ui.l.google.com
    IN A
    172.217.16.238
    youtube-ui.l.google.com
    IN A
    142.250.187.238
    youtube-ui.l.google.com
    IN A
    172.217.169.78
    youtube-ui.l.google.com
    IN A
    142.250.178.14
    youtube-ui.l.google.com
    IN A
    172.217.169.14
    youtube-ui.l.google.com
    IN A
    142.250.200.46
    youtube-ui.l.google.com
    IN A
    172.217.169.46
    youtube-ui.l.google.com
    IN A
    216.58.204.78
    youtube-ui.l.google.com
    IN A
    216.58.213.14
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.180.8
  • 216.58.204.78:443
    tls, https
    1.4kB
    40 B
    1
    1
  • 216.58.212.238:443
    android.apis.google.com
    tls
    2.6kB
    6.1kB
    13
    11
  • 142.250.200.14:443
    www.youtube.com
    tls
    2.1kB
    8.3kB
    17
    14
  • 216.58.212.238:443
    android.apis.google.com
    tls
    2.7kB
    6.1kB
    13
    11
  • 216.239.34.223:443
    tls, https
    128 B
    40 B
    2
    1
  • 142.250.180.8:443
    ssl.google-analytics.com
    tls
    1.4kB
    6.3kB
    10
    9
  • 142.250.187.193:443
    tls
    135 B
    40 B
    2
    1
  • 216.58.204.65:443
    tls
    135 B
    40 B
    2
    1
  • 216.239.34.223:443
    tls, https
    128 B
    40 B
    2
    1
  • 224.0.0.251:5353
    3.8kB
    12
  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    216.58.212.238

  • 1.1.1.1:53
    www.youtube.com
    dns
    61 B
    335 B
    1
    1

    DNS Request

    www.youtube.com

    DNS Response

    142.250.200.14
    142.250.187.206
    142.250.179.238
    142.250.180.14
    216.58.201.110
    216.58.212.206
    172.217.16.238
    142.250.187.238
    172.217.169.78
    142.250.178.14
    172.217.169.14
    142.250.200.46
    172.217.169.46
    216.58.204.78
    216.58.213.14

  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.180.8

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.