Analysis
-
max time kernel
146s -
max time network
150s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
12-02-2025 22:03
General
-
Target
e51d1928e8ac379cfb215ed70bd4ec5d8c166332fd7f8d77b71f223dafaf5c0d.apk
-
Size
768KB
-
MD5
3c8d9bf5f11bac573dfa056bbc8c9489
-
SHA1
75525dec35a1d6ca70306395d2921c7f4c281f5f
-
SHA256
e51d1928e8ac379cfb215ed70bd4ec5d8c166332fd7f8d77b71f223dafaf5c0d
-
SHA512
b6520647c1969f05e78185bd17f37de71d4edeb72d6ed0a519157d6e1b398f31699d519b9e8a3dfd3b81d21f5c4564fe89d8a177c1077176c10941206362d150
-
SSDEEP
12288:A2FtmSHGC47DwrAbSj+oA5WmpYshXZPbGwidNpgvV:JFtjmC47DwrAbHX5WmD9idNpeV
Score
7/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)