0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b

Analysis

max time kernel
25s
max time network
25s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
09/04/2025, 07:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b.apk
Size

21.5MB
MD5

d97fddcdd7034bae124dc04d25b21acc
SHA1

a4413fafd1c30e332a08a4aef47abf5d20f97800
SHA256

0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b
SHA512

ee01c1bedc2af5820d0ccbab8ef18292f20867a2e2f1ac0059326d67b7acc4694a6256be3b71ba56b50f8817634ee906a27f7de3351339faad0cc44e6237c563
SSDEEP

393216:gLkcr0ncN0WdWf1uTz54UF+cp8m1OQYYOVCKZjL2NQiVW2HVRjQdiMQ:YZSG0yimXt2K1JOVCon2vT3

Score

7^/10

defense_evasion evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.garden.iptvv/app_dex/classes2.dex	4503	com.garden.iptvv
/data/user/0/com.garden.iptvv/app_dex/classes.dex	4503	com.garden.iptvv

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.garden.iptvv

com.garden.iptvv
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
PID:4503

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.garden.iptvv/app_dex/classes.dex

Filesize
8.8MB

MD5
83b465452f3bbb096649bc20dc140f68

SHA1
51a3d6bec13801f626d61b7f3e3782c1402b80b3

SHA256
a7acb7ea6dfb095d8a680ff6f3e65858a72dd334e93fbbb11332f93909577710

SHA512
3d8479343ce5c59ab782a2b97069ea603a52555772d561c1c179927b95b6922d747404da562252680e4616bda7e3a870be47f884558a7b0a18ffb7101e7cd48e

Download Submit
/data/data/com.garden.iptvv/app_dex/classes2.dex

Filesize
2KB

MD5
4e2f95c28abaf08f84ae37faa3d0ca2e

SHA1
f9406488efe5154b24a29d1e4c3d8f1e83da87a4

SHA256
2b2f9c8e8c5eb644955280401df8482e5ba6ac71410c3f9c433c540f56f2db1a

SHA512
36016f971dc5b26d4a0f35131bfa92d5de705a8605241d25c560cf2e8ff7ad8e048c772a846866e8b7986960975706cb27868efaf1e259248f932a432ab89249

Download Submit
/data/data/com.garden.iptvv/cache/classes.dex

Filesize
3.2MB

MD5
3cee8782840d36fb7685feb781250a09

SHA1
9d14f118fdc787d5fa13a2a2094bc9d62a6540dc

SHA256
3f12d1478088356fc59d666637b1e5bd77beb7f79e62f1cc7a63c38fd6bf44ae

SHA512
80177ced749376b2aa789443decbbf7f98223af18fe6ace9606f38ca4fb3e0b6833c8ef5ad8621f9c9aea47cfe81673a8aed80628e5911d8d62e5649a5dd2ce9

Download Submit
/data/data/com.garden.iptvv/cache/classes.zip

Filesize
3.2MB

MD5
cac9e352c1d80005f4e15c530cdd1014

SHA1
fb8fc50eec2691d94c76867d509719116c40f0a3

SHA256
6519e43cce3ee2964f890d90356b63d4d1d551e580b22bfd42c3acd3f75898fd

SHA512
66473dc2d4c00be6be08a97f0a17aed786d1ff9943e5a92affcf982a6d8402a6630ee6f9b3c1f65a5c8519cf4431ec77edb3051613a057b5c065730661280463

Download Submit
/data/data/com.garden.iptvv/cache/classes2.dex

Filesize
947B

MD5
1bd625689ca025a89428154d70cf713f

SHA1
20ec0805db8cfdbc0649d759352ccaa744dc67ba

SHA256
03e8fd54e9cfe22f1bb233223808a899ac86843ba7e5875a9983b301ecbca0e5

SHA512
a3281a2636d7544843bab459df4652e1524703975911afd029bec767fe89f8400477881aaaf899dba53adf1e0d29469d846038a3d993c85b67d2152980d2ba82

Download Submit
/data/data/com.garden.iptvv/files/profileInstalled

Filesize
24B

MD5
1640fa51daa20e365da509e29d4b3126

SHA1
e374fd4da7bcef1beea87b907a3f7770b90a6a73

SHA256
7149db6d96f96005d114c0127ad8718c697c2b764d43fedfc7c51d3b166218fb

SHA512
1939ef958cfc512866fc80053591bcddb82a27ddfb02f064c27a41654a855f350865a0f4b38c1e2455340b62b7954dbb0c450b7fc394e4655a9808c00aa28182

Download Submit
/data/data/com.garden.iptvv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
077745c5a9b588b1d6e79c78bd480e2f

SHA1
03203b925596b8840512381da6d32104d7928924

SHA256
922731c7fecc7336d5dc0daab9638eaba77fb59d40e16d957f5ee43bc17de178

SHA512
e8b1e22a4c9a9f88ade20965545f4024ba4899584630fa1ba2d984cccfd1a828e45bc401d00f13abe149515175af5a879e2dbd75d2ad26089fc19bfe781bd258

Download Submit
/data/misc/profiles/cur/0/com.garden.iptvv/primary.prof

Filesize
2KB

MD5
6160ab7a878956092033fa1c0430be4e

SHA1
43390e7cd36e456607810c0f40ec93b847cffe76

SHA256
8f739fe1d4c8446b651cc129dd6989f54f8511cfd23d4988d5fdebb85b099a6a

SHA512
ebd0cb87eeaf351cd6df590cc720798c6b619d1fd80d58eb41c70aae50995397b533d473001177bb5fcddd169da9842b9607b023853b5324f6c6d7effe784723

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads