Analysis
- max time kernel
597s - max time network
501s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
11/11/2026, 11:43
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20260721-en
5 signatures
600 seconds
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20260721-en
3 signatures
600 seconds
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20260721-en
4 signatures
600 seconds
General
- Target client.apk
- Size 760KB
- Sample261111-nvleyafv8n
- SHA256 094b60e7e3ba54b9fafbe2aaa432c18aa86fb9283ff9f025c5f3c99480d64b00
- MD5 576f5a4cc8bd9a7bb6133233819139a2
- SHA1 19a0ab36b0eb3673e90f3f803b823094df84e4b7
- SHA512 14217ef45f5920aa48fcf557ce14dcc16b6a7624b69c5ca0dbed1e358fd2225c54ca9590f6a2c86e6691e8f5baa0e8205943e5c9cc4412707607087343862993
- SSDEEP 12288:JQt+a1a8Lreb1sAWn7c3r5WmpYshXZPbGwidNpgC:Jfa1a2ebbW7c3r5WmD9idNpZ
- TLSH T128F46B96FB4AF867C9F3C6364275C66A96064C544B43D7831986723C1DBBBC08B89FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch