5f3379e716a191859c4fef4530b820cb397ac6004868115f67fc01b7c10016f9

Analysis

max time kernel
147s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
18-02-2025 09:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CBDVersion1.apk
Size

7.0MB
MD5

f0e2e3901d200e76a43b09bdd072c3c4
SHA1

054b11450afb8a07a63ccf33ce365d6d312c106d
SHA256

5f3379e716a191859c4fef4530b820cb397ac6004868115f67fc01b7c10016f9
SHA512

0f9a6e90dee760d44f052ed04063ef3742e8cbedf3f1cc356578c216ec78084e0801ee8181ead2c5771689658cf26a7f9a5f34f32f857f7ffa1fe6db4b21f70d
SSDEEP

98304:nc6IN11Mo/KrHNwF8jmUnhEslfz2oqYjnJjSikAI8NecALZ0slsLW1tGS/B3mL1:Y1+ySDhEu2obSiJNecClsLW1tGS/B3G

Score

6^/10

defense_evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.example.cdb_banking

com.example.cdb_banking
1⤵
- Makes use of the framework's foreground persistence service
PID:4712

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads