Analysis
- max time kernel
146s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
07/09/2026, 15:25
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x64-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
client.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
client.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
client.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
client.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
General
- Target client.apk
- Size 760KB
- Sample260907-strmsazbpd
- SHA256 10438d1ca37f33c3900dc13971a5c284bf7352d01d075ed2e16537a3d89c9bdd
- MD5 780a8f671ffbb39659d27e3888d4e034
- SHA1 45e6aec7e265ef091d4600ee464a3fcf0bbfd0c9
- SHA512 7d148edba712db473934333ba77061b183c597d57db17a80f2c0dd96fa367956cd5168de49d8e142d51bda5d669f42c5cd88f141acc334281252502e95cf19c5
- SSDEEP 12288:gvtmWxa1a8LzeCZ4CK0335WmpYshXZPbGwidNpg9I:gvtza1ameCdK0335WmD9idNpJ
- TLSH T1C1F47C86FB0AF867C5F3C6364675C66BD6064C194B43E74319A5B23C89BBAC08B45FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch - Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch - Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch