Analysis
- max time kernel
896s - max time network
734s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-uk - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-uklocale:uk-uaos:android-13-x64system - submitted
15/07/2026, 22:48
Behavioral task
behavioral1
Sample
standoff 2.apk
Resource
android-x64-arm64-20260325-uk
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
standoff 2.apk
Resource
android-33-x64-arm64-20260708-uk
3 signatures
900 seconds
General
- Target standoff 2.apk
- Size 760KB
- Sample260715-2rf8psax61
- SHA256 348b84d12e8ec9d84a2cc48f0050782aafdd6d4e980ea3f9faea485bd7709f0f
- MD5 5d037ea43c358e57b91ee6d838f9b874
- SHA1 abd9f15a8ca621d1f98ac59eea0a6c5549e5ea1d
- SHA512 b537caf4d408f777481fee1e263ccb2480db99bb1aed5f3580c31493d7da7ae99053feafe56cdee08055f600ebd47bad7efb0cbafcbb570d3913a0aadaa18f93
- SSDEEP 12288:75wTa1a8Lre3pNtyzNwZk5WmpYshXZPbGwidNpgJNEc:7oa1a2e3pKzNwZk5WmD9idNpW2c
- TLSH T169F45CC6FB49F867C9F7C6398375C66A9A064C654B43D7831985723C0AB7AC08B85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch - Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch