Analysis
-
max time kernel
146s -
max time network
150s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
30/03/2025, 11:14
General
-
Target
client.apk
-
Size
760KB
-
MD5
6fc9294f3dd37a2fa0fbf869e5c6df8d
-
SHA1
f61bbdae56f02f2ac60f607cf3e47e664e6ec219
-
SHA256
1b083b1514fbbf0b1488a680a1f7f388620acbae4503ef28b3b1a5758fb97421
-
SHA512
138921c008ed51a8fb35af95d021a0b356ddd93ed702b33ed6af66453446d40edd5d801d2e5e9067aef5cec7fdd724bfad68670d14dbde2e55780e413166f8e4
-
SSDEEP
12288:8DZoa1a8LdeCvcHovx95WmpYshXZPbGwidNpgx6:8Ca1a6eCqovx95WmD9idNpP
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Removes its main activity from the application launcher
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
85B
MD514fbcbbe8edc85bd8e553aa6dbc14b06
SHA15ecc8568ac76eec98483decc273dea3c41c1d508
SHA2564b803307ed0d1131b47b9e581abda3a147e575d0f3a9bd4cff4736a3a154df38
SHA5124f2aec82e8806fd724bb816a00bec325c9fc5b4f4d8bd321be9ce81bdcbba864adefdbaef5305a887a16790ad710d4fbbcbeaee92f7561ecb57fdda1c9834da5
-
Filesize
76B
MD5967f1df68cea387a4855ebb7bf55d492
SHA19ef89affd458ea8bbfec2504286e38721a402b4b
SHA256aa1d89d054b7250c00cbfada78f1254889ea0452ae307e8737d8c1c3d5ce1ded
SHA512d2f4708b4625a3ea0b6cffc6a465c3df2b99c5d7cd6619801c6453589a67ac4cda8c691c213af1c77097af085e6c4437623c6435f0efba7a7c78268d6973c133