Analysis
-
max time kernel
146s -
max time network
152s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
05-12-2024 22:01
General
-
Target
a53cb898d590ea1b59aa0912c366a664c5c613b96a407511173e0590da285506.apk
-
Size
850KB
-
MD5
89e6675e6d17965936c3bd4a4905920b
-
SHA1
870ed68989ccee75682a15054f2d887388615c3e
-
SHA256
a53cb898d590ea1b59aa0912c366a664c5c613b96a407511173e0590da285506
-
SHA512
98e69cde3c47a3d93b61113095c0e4d9779bf9e9278def3366bf49a38068e533893cfb79386cacf4ec680e6b06a67c9470e5d0291cf59a0479fdaada6143e566
-
SSDEEP
24576:eda1amemzMbm06c/dHmVX05WmD9idNpg4:ua1aKzyj/VhWk0d/1
Score
8/10
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
-
su2⤵
-