Analysis
- max time kernel
896s - max time network
780s - platform
android-11_x64 - resource
android-x64-arm64-20250917-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20250917-enlocale:en-usos:android-11-x64system - submitted
18/12/2025, 09:30
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20250917-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20250917-en
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20250917-en
2 signatures
900 seconds
General
- Target client.apk
- Size 760KB
- Sample251218-lgr98aew4e
- SHA256 aa3b976475e375e92f09bf4b06db50693ad42dd7c0abfcbfd598f3e9d46f0744
- MD5 dc24f07167b5e5af1d98781db25a5b68
- SHA1 be76888bf1a04e41e34be3ebd0233fae7323ccc9
- SHA512 8b35f2af0d3dcbbc08fd001416ec279f69805477cb5ab85af237f9e5c4b054b8d4dc4682a9c9d45211aeaa57a7985af1234b9dc85ddcc32ab97cda9cc208c0d6
- SSDEEP 12288:lKpmMLa1a8LdeEzCBmBHD5WmpYshXZPbGwidNpgMnd:lKppa1a6eE6mBHD5WmD9idNpD
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch