0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b

Analysis

max time kernel
145s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
09/04/2025, 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b.apk
Size

21.5MB
MD5

d97fddcdd7034bae124dc04d25b21acc
SHA1

a4413fafd1c30e332a08a4aef47abf5d20f97800
SHA256

0f6ea55effb6b33bbc1bbe0a62880ff420e71803546903d51fe034b1bda7901b
SHA512

ee01c1bedc2af5820d0ccbab8ef18292f20867a2e2f1ac0059326d67b7acc4694a6256be3b71ba56b50f8817634ee906a27f7de3351339faad0cc44e6237c563
SSDEEP

393216:gLkcr0ncN0WdWf1uTz54UF+cp8m1OQYYOVCKZjL2NQiVW2HVRjQdiMQ:YZSG0yimXt2K1JOVCon2vT3

Score

7^/10

defense_evasion evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.garden.iptvv/app_dex/classes.dex	4768	com.garden.iptvv
/data/user/0/com.garden.iptvv/app_dex/classes.dex	4768	com.garden.iptvv
/data/user/0/com.garden.iptvv/app_dex/classes2.dex	4768	com.garden.iptvv
/data/user/0/com.garden.iptvv/app_dex/classes2.dex	4768	com.garden.iptvv

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.garden.iptvv

com.garden.iptvv
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
PID:4768

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.garden.iptvv/app_dex/classes.dex

Filesize
8.8MB

MD5
83b465452f3bbb096649bc20dc140f68

SHA1
51a3d6bec13801f626d61b7f3e3782c1402b80b3

SHA256
a7acb7ea6dfb095d8a680ff6f3e65858a72dd334e93fbbb11332f93909577710

SHA512
3d8479343ce5c59ab782a2b97069ea603a52555772d561c1c179927b95b6922d747404da562252680e4616bda7e3a870be47f884558a7b0a18ffb7101e7cd48e

Download Submit
/data/data/com.garden.iptvv/app_dex/classes2.dex

Filesize
2KB

MD5
4e2f95c28abaf08f84ae37faa3d0ca2e

SHA1
f9406488efe5154b24a29d1e4c3d8f1e83da87a4

SHA256
2b2f9c8e8c5eb644955280401df8482e5ba6ac71410c3f9c433c540f56f2db1a

SHA512
36016f971dc5b26d4a0f35131bfa92d5de705a8605241d25c560cf2e8ff7ad8e048c772a846866e8b7986960975706cb27868efaf1e259248f932a432ab89249

Download Submit
/data/data/com.garden.iptvv/cache/classes.dex

Filesize
3.2MB

MD5
3cee8782840d36fb7685feb781250a09

SHA1
9d14f118fdc787d5fa13a2a2094bc9d62a6540dc

SHA256
3f12d1478088356fc59d666637b1e5bd77beb7f79e62f1cc7a63c38fd6bf44ae

SHA512
80177ced749376b2aa789443decbbf7f98223af18fe6ace9606f38ca4fb3e0b6833c8ef5ad8621f9c9aea47cfe81673a8aed80628e5911d8d62e5649a5dd2ce9

Download Submit
/data/data/com.garden.iptvv/cache/classes.zip

Filesize
3.2MB

MD5
cac9e352c1d80005f4e15c530cdd1014

SHA1
fb8fc50eec2691d94c76867d509719116c40f0a3

SHA256
6519e43cce3ee2964f890d90356b63d4d1d551e580b22bfd42c3acd3f75898fd

SHA512
66473dc2d4c00be6be08a97f0a17aed786d1ff9943e5a92affcf982a6d8402a6630ee6f9b3c1f65a5c8519cf4431ec77edb3051613a057b5c065730661280463

Download Submit
/data/data/com.garden.iptvv/cache/classes2.dex

Filesize
947B

MD5
1bd625689ca025a89428154d70cf713f

SHA1
20ec0805db8cfdbc0649d759352ccaa744dc67ba

SHA256
03e8fd54e9cfe22f1bb233223808a899ac86843ba7e5875a9983b301ecbca0e5

SHA512
a3281a2636d7544843bab459df4652e1524703975911afd029bec767fe89f8400477881aaaf899dba53adf1e0d29469d846038a3d993c85b67d2152980d2ba82

Download Submit
/data/data/com.garden.iptvv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
7be7fdd8034e3f4ba99583eea53d84a9

SHA1
eca28207d23a3219931cb0855630a0672e0aa89c

SHA256
116099de1905db9b5700ebad4967445a8a6edd2bd6c3511f40e292f1648325b2

SHA512
04e26cb475a9033ec6fba5a2fd315a8cb8c6573d4ebd3ee834103ec36b01fe57c99031c9e6dc931b3198d84b685c8d16fc9e6031424bacec74adc1dba8d7bf3f

Download Submit
/data/misc/profiles/cur/0/com.garden.iptvv/primary.prof

Filesize
2KB

MD5
a816bf8da1fcd1b455b16f42ea3eb9c8

SHA1
dfd293d82a2bc7b64de7ea30bced3907ac581866

SHA256
68a14e8d34f8aff2420743ecbd7d2472ab253bbcfd468ad76f19989ba4785763

SHA512
20a82a714349249299dff31adff81e5507969d20397e733efbf443cbd94a841cb685e95312e7038db9ef4635c3da1677635f6c1b1d2f41842e0e3c100d32ac1b

Download Submit
/data/misc/profiles/cur/0/com.garden.iptvv/primary.prof

Filesize
117B

MD5
095b8d41da72bd9719e739b10308b37b

SHA1
fd0330b265b7c4b44f7b43aa46497d70107f578c

SHA256
ac45be8f1453bfea8d8b907c61ebdf21711d4ce4c4e7ea66e74e9fcee4054e7a

SHA512
500e407c32e687fad301259617aa757282c1f447a76b2ae803d0f962115bd2a387722ed94de62d2fded9adafdf39cc6b64712b0afd1d81088fdfc9fb5f6f7d58

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads