Analysis
-
max time kernel
146s -
max time network
154s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
01/04/2025, 22:03
General
-
Target
f4f454c14502397744a800b34ccfe611f2662f500ad5af60c8b12fcfdc1442ff.apk
-
Size
853KB
-
MD5
87a848474afdba18cda4439b726b3d43
-
SHA1
b42772efc4765972ed8602c1c5325ac05fce2c70
-
SHA256
f4f454c14502397744a800b34ccfe611f2662f500ad5af60c8b12fcfdc1442ff
-
SHA512
081d902f29b35abfd8144f200ce6dd7b4ffd9ea2a661112a418d0461f083dab00b9a026cfd264cef6917a978150c4a0ae60a8cdfac0ce2be7fda48ef4050f7fb
-
SSDEEP
12288:7Svk7hZva1a8Lze54yYc8hu7dds1KyS5WmpYshXZPbGwidNpg2:+vk7zva1ame5lYhhEM1KyS5WmD9idNp5
Score
7/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
cmf0.c3b5bm90zq.patch1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)