Analysis
-
max time kernel
66s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
10-01-2025 22:00
Behavioral task
behavioral1
Sample
991f7f8b9a7db8eadda1dc4bedeeb2f5b4eed0d419e0ed60df5b328b4d0d000f.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
991f7f8b9a7db8eadda1dc4bedeeb2f5b4eed0d419e0ed60df5b328b4d0d000f.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
991f7f8b9a7db8eadda1dc4bedeeb2f5b4eed0d419e0ed60df5b328b4d0d000f.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
991f7f8b9a7db8eadda1dc4bedeeb2f5b4eed0d419e0ed60df5b328b4d0d000f.apk
-
Size
844KB
-
MD5
817ac8eb9105c855d5b8a3581df75b24
-
SHA1
7611c69c6247dfca9994ad3101f5698f1fcb4112
-
SHA256
991f7f8b9a7db8eadda1dc4bedeeb2f5b4eed0d419e0ed60df5b328b4d0d000f
-
SHA512
1f9df99c48a2810cfe5f64868e9c872e26f67e4eec7312362ab3b5026fe33fd74f7782c3d7e8d3763b090dc2f08b5e2faf30528ff733fb8db4c74e9fb1bd1531
-
SSDEEP
12288:+fDGuGa1a8Lze2iw7zZ52SI7Ws6/795WmpYshXZPbGwidNpgXp:+6uGa1ame2xZQSISz/795WmD9idNpu
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch