Analysis
-
max time kernel
146s -
max time network
151s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
29/03/2025, 09:58
General
-
Target
client.apk
-
Size
760KB
-
MD5
8171bddfe441311fd12dbb372901a202
-
SHA1
8f643a2d3749aebe6baea935b916c881a54b224c
-
SHA256
42f45eeec399887bb4625c8fe56e8945cfb9e480b004e5ea9a74cdda4ccdefb7
-
SHA512
f7f3cc289cf6544e319b99fbfa54e5571fccb037337baccb21e404ddaee60c5494e57bede795462bd642eda4ee1ec03a24d29b3080ba5c3e739a89a0726fb0b2
-
SSDEEP
12288:pRkI9rda1a8LVe/FfKxyqg5WmpYshXZPbGwidNpgpx:pRda1aKe/8xyqg5WmD9idNpE
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80B
MD5e958610069b080ac1dd245c859194ed2
SHA1b47087871d13fdfd26406eb406be7f6d9a3d7ba7
SHA25608b152212e2ef9997b24ebefdea3f7b5119a45be193132d3c2eaacee2b667752
SHA512e3274b61fd2943f6eb2ce150226081cd0c100d5bb414050e0762043edf08442ce28cfcef16c149a725d427d1f0f45604795e2a88da62178689839a6eb6b3cae5
-
Filesize
76B
MD5c38e4d90a96599beb8b50a58df796ca4
SHA11a6b16ec6a9af5d1c09fa2c2e60f59578842e55a
SHA256f73fa67f812ebff44462fa005a8c603f0f9299e6282ffb5cbe63536e27b8bc3f
SHA5128dabbf1ebebf8ac5b546d8a18c29180aad7a5b9d9524b32235fcf68a20d6ef1459a328c48adb6acb1af261a395c201e9d067dfca7451604202a4ba45ffda5585
-
Filesize
60B
MD586f457d21deaf33e7b5bed4931bda08b
SHA182ac86a1a24854d70a47b9cd9e4d75203969a3dd
SHA2568b31fccf2cf102386233810001932c92373481ab2bc8710eeb3a2dac0575ddc9
SHA5129b44e0753931786e662f662b94746c907b0d851213b93732ba162190f46931b362e9701c0980c377ecaabb0b040d584865aaeb243005bd47f2ad8443d16546d4
-
Filesize
85B
MD58712f7d6199a132cf135fa312e3ff25d
SHA1e750e9df3b3f737072c143b35f48838039049f23
SHA2567fa4b78c6d497d878427be9a93625a0fa5016f96075b37c9350f95ba8273f718
SHA512e595806634f5b6098c4bae6563819827763b9afff49391e752bf4e5365f306126bec24e9589fa3e02b4cdcb1ef379fc999bec6a86cc54d74ccd0723427198b8a
-
Filesize
107B
MD5daaef9988d02a21adfda47f72f8dec92
SHA1cf9dfef8e0a5ed4b35773217aede9c26c0908146
SHA2569a11b352b23d04b6b108785c1f131aa175e910d3ead129dccaaf0e13a96a4abd
SHA512472c91f71281876b0d65caa07cad39b460d8c6bcbb5333655939d613b126843cd37199ed0f666e8565de83ee3610d561cbeb56d3d6ee4581e97e785e6ee37798