Analysis
-
max time kernel
146s -
max time network
151s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system -
submitted
29/03/2025, 09:51
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
client.apk
-
Size
760KB
-
MD5
2f27836441bbd0809e88093b21d5c8f4
-
SHA1
6b0503dfc6b9bd285068e22060ac5e1a56ebf80f
-
SHA256
415e471607a6a80cb2fa57709ad1e3dccceda6fe07bfd6f785329f5cbe70ac31
-
SHA512
7a168a513e437b7e6fc6a6743c4af3697aead3b88dfadd5e6e91ea6ca5f07a71dc532dd0e307ddfd08a612806b3a3a92f0f9211349d758aa5cc8bb3b631d89a8
-
SSDEEP
12288:0+kIwjba1a8LVeVZhijc0y5WmpYshXZPbGwidNpgqx:0+Oa1aKeVWjc0y5WmD9idNpZ
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
74B
MD57ac6db96c49e253cab1dd54671f9007b
SHA18d9f57e55a8e9aa1a95e366940ba6e0b5e37e959
SHA256a7003719f35ff4f581641efad37c5c3ff699192e3138b050919f84c1ca4ff679
SHA512ae8caa9aaa4d0a9404672180c6c8bed80f7dc02065fb55e4a4e61cafe6bafc12f0accd02042a1f44e3c4bfd4d5c78dbd4e0b219d1bb403e02376d3d289b052fd
-
Filesize
59B
MD5b51bb4ed2a53db2d12cf39c5fc0c0f3c
SHA13e8176d60c95c19d1dfa9aa6674c1523b4b0bad0
SHA256d4ec9f8115be49ff6c5f4bf989bd0e18accf061f1a0106a4b3dc1712fc0531da
SHA512ceb1e6ccc4e0ef6d9474480f89ec7b06d538331bb14e7aebd30dc943c3bc5f3bfe7b67c59333b5faedc362330dd3bce797592cd7134a98f4021b8f960aecc838
-
Filesize
85B
MD527113aeb5c02e17fcd15f9ed670d4895
SHA13dda1f650caf178739e26fac5344d97c3d4ed2d2
SHA256e4a01d1caee94bb68556b6f0b6bbfd682f291e2d5c46b2e411a97ca2b3637fd5
SHA512b192e3f85c501b6673396b79b76bd1f50a12c7245eae74e83c868ea5827a8a905d31856fc7ce0cacdfd8e643b6aa2a024f72d29c6cbf22736a3224acb3ef4b49
-
Filesize
76B
MD57d2b12b894b8d523848f9a0aca174726
SHA1d9771d888a41091223a279c58c0181fbfa9abab9
SHA256005b9bf031e8f167ede7ae6e50918f07d636357c4c04d7a7c78722fd53d85964
SHA5129b912382a07fa2dcb35fea8256aefbd0e66ec5a98d7562830a937ce8ae49ca12d429269254b403f12d95480153d7720e18f51215568b203fd925585e78448ff4
-
Filesize
264B
MD50fd3f77ab6fafd3fe5912198286c5c18
SHA1a9b295797b989c0907983df1e1b916ea4e12bbab
SHA2569b81135268de6d2568178523bf4c544bd7b2e95bb8aa7ee9d1b35252eb5cf545
SHA5121a44eacbc442d1327d1538450ec891e4589a307521e3e5971c01b7bff41e93852e04d2a9fcfa865af8218e7e476eaa74842b94fae341cc5711f3e2cbe56ec824