Analysis
-
max time kernel
149s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
09-02-2025 22:01
Behavioral task
behavioral1
Sample
74df1aea39d85d36492dec1891ff354b9685a0c6d5cc9ae7b8c213ef821979ee.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
74df1aea39d85d36492dec1891ff354b9685a0c6d5cc9ae7b8c213ef821979ee.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
74df1aea39d85d36492dec1891ff354b9685a0c6d5cc9ae7b8c213ef821979ee.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
74df1aea39d85d36492dec1891ff354b9685a0c6d5cc9ae7b8c213ef821979ee.apk
-
Size
760KB
-
MD5
92c2ceefc9b42275b539942fefefdd91
-
SHA1
06f3807a40727a459d09310ebae70f7d9a66e9b0
-
SHA256
74df1aea39d85d36492dec1891ff354b9685a0c6d5cc9ae7b8c213ef821979ee
-
SHA512
db2e68cd5a34d10cc34dd24b7d1d9a30d95b09d07aa4155ac1ba6eaddae6b879ea9979aec17d89b90218736920925b6073e2d7be32e3a7310c59284d4db27c3f
-
SSDEEP
12288:h4NvLxa1a8LVern/7HIIq5WmpYshXZPbGwidNpgwNg:h4da1aKerTHIIq5WmD9idNp+
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch