Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    29-12-2024 22:03

General

  • Target

    087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1.apk

  • Size

    760KB

  • MD5

    e2c769c36983395783edbd3d0e49d020

  • SHA1

    562f4a3dfa4e74e06be320c4ad37ad1ceb21af20

  • SHA256

    087a29f6aa117e87ab9b7ab00412efc69c26d316e24589716dddcd156a7f2cb1

  • SHA512

    43e37883486f8633f01fc2bf9a436fb148f4de4bac292f01abba2cb83c9f7db4402f700928bd05c52535ed4b5e3328dcfae4ad8a68578333bba0b87e854ecf26

  • SSDEEP

    12288:wugitv3BZRvS0qFWNGbmYt5WmpYshXZPbGwidNpgB:wFiRBZRrqFZbmYt5WmD9idNpu

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4212

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads