Analysis
-
max time kernel
146s -
max time network
154s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
29/03/2025, 10:00
General
-
Target
client.apk
-
Size
760KB
-
MD5
52131c6753cbe761a5cb5315b19294c1
-
SHA1
5192e61b57c044783d7e5098fd5267dd78b72112
-
SHA256
e92a03b66498dd7a3cbeec980821f4931cd360822eb0c46e85305c6770378e6d
-
SHA512
9e11799717eabe0479b664a288997d4d6d7787aa15c290935e290641380d4415c14ad11d16d64cf3946382c7d048c0993a89075bb0341e6ae94dcae47ec96354
-
SSDEEP
12288:OJonHa1a8LVeQN6gAXhR5WmpYshXZPbGwidNpgzD:OOa1aKeQBAXhR5WmD9idNpI
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
59B
MD50f56b17fd6d3e18a6203a29241ed27c5
SHA16baa22d8c444bdd23d0ca9c94634dd63a1ded8ad
SHA2566b064d84d3af22f3744f128f10ae3f653915d5e586e1ff5ed97900f67226bbb3
SHA512f8ff9cf49fb656c6910528e35c0f8d6e10dadad6f05e4e2a95aeddcd9e285d978b4e8c6dd3d0b118a60dd69a66ca948eca44e89d2b87cf7a4cce1b2504240485
-
Filesize
91B
MD5943867233d8a6c46765c7765ca4204b0
SHA1f154b9276f8750f9b69c3e2e1818dfb07979fa8d
SHA2568650c2dd8ca511169377490114c602ebdb8d4847bee2ccfe0c490cb07b4f8c65
SHA512d5b2427ac74c237a6d7908beaffa22c7d88b0827d97fc26bad21abcf9dae834c717ccf68575bd5570eb25134a72d8b1583d6f6a759a809b541df9dc129a72912
-
Filesize
135B
MD562d88481462844fe9e52c20df04da384
SHA139e5f7a10823c93bf99cf2d842d33f174288fc01
SHA25692a6fdf4ada3248cf29bd7bb3bb7a56c3fd4c4d7e46a94e3be446a6d5f33aab0
SHA512146263f3e6dfb8582ebb3a4f6c7d25821433f26a795d8ad81257c3fa598d1e583f0b65e5b949dd91a58df83ad99516feeb3930f0a60d628b443d4296aef810f6
-
Filesize
56B
MD50bcdfc746e03d1401c7f310b966f060c
SHA1876d7f7ae9795014fb855981d95d53085a98ef31
SHA25650e30bd349f0c45a2401363cc3ccb9232aafe2bdd7f52aaeedaf0aae0ed5e97b
SHA51241f36fbd3a9273f714f3016ecd1de9e8b065883b97a8c81869386419341936201a34881a7a9ead8005241eadfda09ca0ab0032727010a2b79354403844e1e33c
-
Filesize
181B
MD5b107d49aff899d428951cdebba8041d9
SHA1089df7575312dff18d6e163bc1b56556296adc58
SHA2560a999ae9b4ea6efa25c0eda0b0a23b5cd8f976d598b2a6094c5a7ad8ba703c01
SHA512f05eca507bc7640995ac5ebf7139de55d643bb3a015e38251e746e1fee959c5429148c43cf1ab9ec22e4fa063362493505fa1d343bacd283f4b44e227af415d4