6b8f4b42aceb97631a67731a7d1344f5d99fd04e5aaaf1b8b4f5e5d2f8a9e7a4

Analysis

max time kernel
5s
max time network
153s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
03-01-2025 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6b8f4b42aceb97631a67731a7d1344f5d99fd04e5aaaf1b8b4f5e5d2f8a9e7a4.apk
Size

760KB
MD5

e16839296398760f818b0ebacb21a6d4
SHA1

b460a66553711e605839a580c52bba87a707ddff
SHA256

6b8f4b42aceb97631a67731a7d1344f5d99fd04e5aaaf1b8b4f5e5d2f8a9e7a4
SHA512

0f6f22e415e50d573d5d412d7237804d53e76098670d923028ee36bc0acc9e1cd171984cf195a5163690372802412f87ad25e4168cfce866a24be5117321e2d8
SSDEEP

12288:Gdkfr1a1a8Lrecty4Uzwqk5WmpYshXZPbGwidNpgA3:Gd0a1a2ec5UMqk5WmD9idNp9

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
102	7.tcp.eu.ngrok.io
111	7.tcp.eu.ngrok.io
44	7.tcp.eu.ngrok.io

cmf0.c3b5bm90zq.patch
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15