Analysis
-
max time kernel
146s -
max time network
152s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
29/03/2025, 10:04
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
client.apk
-
Size
760KB
-
MD5
038600681150a0d7b445700d9e27bed4
-
SHA1
4854549179766a080aed9ac88cef8fe517cc8a17
-
SHA256
e524a1934bbc30df039d1f448d33581c292ebdccff7ad3111d21695313a81c1e
-
SHA512
1caa53f60d348c03f4d1da6ba797db58af2f901210a79538b6a049ff56fa25a6428dec1c07f0fb22fc836b1076015db599aa296e969d06105f25316fd28fa3fb
-
SSDEEP
12288:S8kI2AEa1a8LVecDm9SSP35WmpYshXZPbGwidNpgmH:S8sa1aKecWSSP35WmD9idNpD
Malware Config
Signatures
-
pid Process 4743 cmf0.c3b5bm90zq.patch -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
59B
MD543591ef5ffc3bc7c7c643bff92b9c9f6
SHA1162db045e54f8d274c5834b05562efbf7ec236f1
SHA256955e18dc0f51f4a6dff90b821e7eb65600266060af24637e2feeacbfd13e8339
SHA51268334d30e2983fecf866b1df5fc668cb193a6bf1561e7e97903726e8c25189c3b69c3c4d71915fcd5c7637b20cc47e2f40c45f1a168c0a6438688ffc980556dc
-
Filesize
76B
MD5868cac1692287538164bfd658a1ab033
SHA18830c1c9a2083a159783286c64688a4711151afc
SHA2568b58300207701d8d6b48fbe4eeca8bee25261260cb2aa06a1ce8bb28ae623925
SHA512e358d1f6b9feeca6669175373c62a5e0e977f857e52547b3601fc2c5ed0d1c4f51c765c1e6075c9a206aa96346f4214fc5f97421039517200e20284dfbbb32a2
-
Filesize
85B
MD52bc49dc546d172e28b1543c5a8b28754
SHA1ccd0c562b80f142d5909365e62605fa5657f22bf
SHA256c39191cec3b11373ecc0a31dc001ff6a4ae54cd76b1ca1c6168a8a10b90fa393
SHA512a710bcbf5561c7ff6405c1d1cab7cc87a4844da09522ceb475bc9311e953171598f0ace0d07c079de25dfac0f0a090e21409193b0d79163feaed12e5c186ee15
-
Filesize
181B
MD5a469d7563ebf048f8c970a69e2726b1a
SHA14e77b41fd9edb1e02e68da1f8b5edb97de5fd9a7
SHA25618cc9ec710654f8fc53690ad1adb345b237176f870d52577d8959a6f6ed8c03e
SHA5128ef01e5db86f5fd6337966f579e0a708c5f0e5cca8b638489189fdf42322620bcc2441d40db071387c44ce5a877479209a07d1a4b9ee1789717d852896e1888a