Analysis
-
max time kernel
146s -
max time network
150s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
21-01-2025 22:06
General
-
Target
409d21e37642d33fbb4acf140b50c2f654320031c12b503778699bd0c43c97f3.apk
-
Size
760KB
-
MD5
3e25d7cb7fb34648c825213f630962aa
-
SHA1
3aed04fa87764cf84f5704cd52e1d9ec659722b1
-
SHA256
409d21e37642d33fbb4acf140b50c2f654320031c12b503778699bd0c43c97f3
-
SHA512
3315574e6dc5432cc998b063ddee1318d546687c56cb1f3f57184b085f9f221332ecd57219dc8f71f2ed92aa1e0a98b3636f22661cdf421fcaeca1341abb55ab
-
SSDEEP
12288:nvM+LHPa1a8LreD8fkaAXx5WmpYshXZPbGwidNpgZh:nvMka1a2eDDaAXx5WmD9idNp0
Score
7/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)