7e0f9060a14a35e1e7ef971548391a2b3f84db907e0ae5221f93b0fc58486f12

Analysis

max time kernel
10s
max time network
154s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
18-12-2024 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7e0f9060a14a35e1e7ef971548391a2b3f84db907e0ae5221f93b0fc58486f12.apk
Size

760KB
MD5

3a0672ee9a000648bd3865ecc80f4ed8
SHA1

ccd9f25b18fa4841970c7f6c5a3294d14ce80f9d
SHA256

7e0f9060a14a35e1e7ef971548391a2b3f84db907e0ae5221f93b0fc58486f12
SHA512

21ff2d65c2e51257dac511f5286e77807d3ab963056b7ef893f9a8c0919f96eb9c9d0be93b5bb5c9703793d103cc581dc8734444e80e1b1a0fa1c35ff85fbae8
SSDEEP

12288:2Q1DTcdAa1a8LzeVhdknhom5WmpYshXZPbGwidNpgGx:2Q1OAa1ameVknhom5WmD9idNpH

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
38	4.tcp.eu.ngrok.io
106	4.tcp.eu.ngrok.io

cmf0.c3b5bm90zq.patch
1⤵
PID:4973

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15