8832758f57ce3c93e6fb47312f167aac4baa7d5b14bdf702587e0016a7e7c57e

Analysis

max time kernel
4s
max time network
151s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
02-01-2025 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8832758f57ce3c93e6fb47312f167aac4baa7d5b14bdf702587e0016a7e7c57e.apk
Size

764KB
MD5

e1b4b53db4ee6c670fe29baf2e1508fb
SHA1

0605ca63aa06f011c263d8ff2a1e61eb79379fdc
SHA256

8832758f57ce3c93e6fb47312f167aac4baa7d5b14bdf702587e0016a7e7c57e
SHA512

61436d60f968508fac733a309c1914f4cfef44630e4ba5831024fb0d353fdb05e242ca74ceb891c129ebcacb4cfbc6b8d18dd3a8b56dee40d5cf57a0d7b7bf61
SSDEEP

12288:kKUr4J6sgRQLzv+F7Sl8p5WmpYshXZPbGwidNpgTf:k8J6sjLzvy7g8p5WmD9idNpY

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
59	0.tcp.ngrok.io
111	0.tcp.ngrok.io
129	0.tcp.ngrok.io

cmf0.c3b5bm90zq.patch
1⤵
PID:4971

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15