eed200e27810e20e0d9320a5510005b7f22a7fa432a1d10b921d322ccda0d67e

Analysis

max time kernel
8s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
21/01/2025, 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eed200e27810e20e0d9320a5510005b7f22a7fa432a1d10b921d322ccda0d67e.apk
Size

760KB
MD5

4bc2e7b96129e42cc2c5eec037d692ce
SHA1

be161d9211d0e71b163d8ff64d0100812b6dede9
SHA256

eed200e27810e20e0d9320a5510005b7f22a7fa432a1d10b921d322ccda0d67e
SHA512

58efe2963213aa73d617d8c7efcb473e6ad75a86621cab85ff325159fbd40e2d5a292ed13d9f9e0bb68f9d5b75826f21030859f50eb7c8103a47ae5c80906ba1
SSDEEP

12288:FRV695jja1a8LdePvL3Dg8m5WmpYshXZPbGwidNpgN3:F36Ha1a6ePjDg8m5WmD9idNpm

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
37	0.tcp.ngrok.io
120	0.tcp.ngrok.io
136	0.tcp.ngrok.io

cmf0.c3b5bm90zq.patch
1⤵
PID:4933

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15