Analysis
-
max time kernel
147s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
19-02-2025 00:23
General
-
Target
client.apk
-
Size
760KB
-
MD5
19facbc4b94f964fdc19430d9735f161
-
SHA1
e071765338f67965a297f0856ed3bd90c36e9ca1
-
SHA256
1e2db7b10f70c84b001be796c869c4b03416d387898c5beaf4d6b98e092e2874
-
SHA512
bf79175644f37cf739813191f9f58d016edc39608c45cfe038e63869b551698074ef155d401a3d1c6760d76e06ffff8333d3aa18ecbf5e5447f6129a530538df
-
SSDEEP
12288:0uyDa1a8LreR/xtM3HC55WmpYshXZPbGwidNpgPTm:0ja1a2eR/c3HC55WmD9idNpga
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52B
MD594dff7055b6b9b321cd1fe09a3cc6cb8
SHA188fb617c43469866b74f86d4ddabf5fd1daa3cca
SHA256abe831cd647f43f61c47eaba77e99540cb535d6a00c58bc8d9cd7e56f781fc04
SHA5122e4d6fb7e55040499c999a17c1b4a38613523432e0526290447f9201cdc05cb4dc51efa00dd98a90bce59d7435aeb2c96e69e8aba8dafdd6c4407b99291364e7
-
Filesize
67B
MD587927d54ec608bf48bee30bbf2d32f79
SHA157ef486f8a69809d07cd5903a77e957605f94aed
SHA256b887aea5dc2732d05d78e8baabd5558aeafe9ec836a9081334d1d1d71d00caaf
SHA51265049eecf8bf452baa02c66d2b86e69a988f41cdb2b0d43f99fba5bf3deb37bb9549715a89a83d6e61dbc62c39a9d8f05fa78e6ae3a63b9b873e9fc5c4b0baeb
-
Filesize
61B
MD5756aa358652b17fd0fdf6d305f90b3e8
SHA1046e203a59b415a9cabacc60014e932aaeb73220
SHA256342afbff127740a5861032c2c56789742542efbdead087a5b17ed49196c3e572
SHA51208db6c9c07b3a913c3ef7c58975ceb3e754acbaa107fa6d26302d0126e33553bb4ac1bbf1764e77a7a8332dd6f5d8acdc1cce05d7f0819916dbf2329473e69c4
-
Filesize
63B
MD55c098b9192032cd867147964ea382bc4
SHA13022ad38d63df70669159d5c58aee7e6c4b31d99
SHA256a6e944c7bed08b5c437f05c058df30083e45ecd6133e0613617db5cb03d817c0
SHA5128566cc728a33922a7767e67298afdce4388160ec897b76b849bf83bb2e695068f727c906acb432bb3229d86ce5a10cb7bacfd121394aebc6d699b0dde0888749
-
Filesize
230B
MD567c0dde2b7944d1be40c45f12671ffe6
SHA131b645934b0db5f2a742cc009c93ecc25fc6e250
SHA2568a04f22b06a62beee62d82f5175d02457fdfb2e8250ab52d4ed5f07dc2a660c0
SHA5128f72eeb50fe9858b5ce22546651bd86ec07a7e5d1b712743b855f9e5dcbd530db24ae35a570a7af0ed5b3246b66b6d98c52f27c10ef677f5de68c1d32ed733d1
-
Filesize
78B
MD5825ffee46eb8509c7c6baec2f8c838c0
SHA19cb9f9fc8c3d01d338f2bb4f22b85658a9483a27
SHA256514f31b177e31fc46b2bdd03ef265f34a0a15915e47fce2320819ac91ff32836
SHA51266a8cf4de89ab6684f0c6a5df858ca6016320a0e02361346871c9ad0d25b53692e4ac25fa16b5041916e6e200ca8e2ded14aaa470193b8c390cd852b1887cb2d