Analysis
-
max time kernel
146s -
max time network
151s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system -
submitted
29-12-2024 22:03
Behavioral task
behavioral1
Sample
087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1.apk
-
Size
760KB
-
MD5
e2c769c36983395783edbd3d0e49d020
-
SHA1
562f4a3dfa4e74e06be320c4ad37ad1ceb21af20
-
SHA256
087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1
-
SHA512
43e37883486f8633f01fc2bf9a436fb148f4de4bac292f01abba2cb83c9f7db4402f700928bd05c52535ed4b5e3328dcfae4ad8a68578333bba0b87e854ecf26
-
SSDEEP
12288:wugitv3BZRvS0qFWNGbmYt5WmpYshXZPbGwidNpgB:wFiRBZRrqFZbmYt5WmD9idNpu
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch