d96de2b0a59f1bd8a15a309fadd9b7c66d819900386c83870cde581bbeceb029

Analysis

max time kernel
66s
max time network
303s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
03-01-2025 07:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Roblox crack cheat 1.2.apk
Size

753KB
MD5

4a4603e3014d5101eb30623b131b2ec2
SHA1

471d97da289f1c9ea20a11352dee327fc586e661
SHA256

d96de2b0a59f1bd8a15a309fadd9b7c66d819900386c83870cde581bbeceb029
SHA512

e19fbe094f7fe96229141ca934ab230fdfeca38a551a2c5badd7e701bf70398206955c44752a32b1d628158a04e4325a78b57a780f2b30b2ec81f58dccab1eae
SSDEEP

12288:bW8Ca1a8LreGMHAAfb5WmpYshXZPbGwidNpgN1I:bia1a2eGiAAfb5WmD9idNpb

Score

8^/10

banker discovery evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4978	cmf0.c3b5bm90zq.patch

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4978

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/systeminformation.android.app/config03-01-2025.log

Filesize
39B

MD5
647be2e7751855042640b13fbdc2791b

SHA1
3d705cbb1581cbb600af1cccf83028593622b55d

SHA256
6203718df13d9ad90ba8a2e33902611a3f179dfc9b1b3974cbfe5f77070f5aa2

SHA512
4aead2d66c397ab59e89be8860e321f2d3250e844b8cf334769fc1b45945ef42b9fe45b796814db666fe7d6e6fe9ae405aee6f90967d15b5520d595e445cca96

Download Submit
/storage/emulated/0/systeminformation.android.app/config03-01-2025.log

Filesize
61B

MD5
ea8c39c2659efc4c7656029ed81517e7

SHA1
db07f05982d89630a9b33cbfb015403dd2d7b040

SHA256
d4754494345729c996568ea7563057fdc6a41c439ecc77e9fc1c381d885b62ed

SHA512
c3df480b1de1c8c4b5c07c6fbc1cf91878a06e9c0e88f0220d80afaea0e8c871cedd0376329d0fee3afd631bb7a8122b5b0bc38cc3de1572f6beddd50a4f1d82

Download Submit
/storage/emulated/0/systeminformation.android.app/config03-01-2025.log

Filesize
85B

MD5
bd3969814fa5c0a7313a088ef4fec3ee

SHA1
89a604054393214629bc0c5bbd15293ab1dab61b

SHA256
964083a51374a9a0c7e7dd8891adfc8a319a16d4a9164d50bc7e6c51a8fd90fb

SHA512
1212abd14317f47aee379e60586133d1a38a3a869c8949e86d49cae836939f02937250adcc9e7131eecdf3733e74c5f0747daece11c6bd47a2a584b08c9cd1cd

Download Submit
/storage/emulated/0/systeminformation.android.app/config03-01-2025.log

Filesize
76B

MD5
d6957ac2b18f44d2143db7a33b31b97f

SHA1
dd668c5ecea5acac6a78737e9b31a284daacd1d7

SHA256
539ac853746f941148293f6aa2afdf0ef1e1b7eb3800666826a48fb60c3a6d11

SHA512
601db1cf9f9bd241ca96fdd4fa9205053114cdffe000b5c92ea8b0d77a6a76d5d1a9e51cda4ccf031ca4115705a460073abe8c969d12b8e715ad5290b5a7a077

Download Submit
/storage/emulated/0/systeminformation.android.app/config03-01-2025.log

Filesize
94B

MD5
127d6e5e06b1c34e6895a6c45df76710

SHA1
76fbf257e89fe251ecb1e12f7dd5943de2449c0b

SHA256
4f6695fccbb7c14d755cf15b6e4f37f405b9de42a787245a5f0d81e1ca432d61

SHA512
a9c55cc3ef4c841d8be2f49c4178d03aabd629e93d7c6b8ee9a73375369402f915baf664a8e8b9bf9f575a1e4161d30c5267ec9f0608ea6f3fc6fc1da97857b6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads