Resubmissions
Analysis
-
max time kernel
27s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
17-05-2024 05:14
General
-
Target
bruno-wi.apk
-
Size
2.4MB
-
MD5
293b41d03ef40d850c5ec85f53a86b08
-
SHA1
9978c669edd8fb82f1e1e2aaee5346756a924c85
-
SHA256
f8a809cf09ab7a47a6df92287d1ec79d7d2446f0f83975d1d25ae806ea8f0f07
-
SHA512
26880f93579e6f763b4039c13372af9bf20a8de3db5571a14ee9691bf56ef372381337990bb5b7765bd7bf95b3548bef8de751938a25e6f8db17bedb84846bf6
-
SSDEEP
49152:CC8vcHNS/dklW9XuBzvB9RjXStOvv0/SvEfOKoO9SIW:CC8U0lYkXazvB98svkSvppIW
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.yxwkwcsk.bgronvby1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.yxwkwcsk.bgronvby/databases/privatesms.dbFilesize
16KB
MD5df5c8186fb22a98af5f11e32940b718d
SHA1a17b812629f622f016a305b55254d79155f95c33
SHA256efd974132e07d0feac04432b4136ba9f7e170470b2b1bfdc8587a32aef52d2b8
SHA5121183208100d47bd2291da53d642274574fc0bf2cddcda9fdca307db624c681b1bfd1877cc83c557e9a031a5f9f500ef4f312312c7c86d53be43421ca196fd45e
-
/data/user/0/com.yxwkwcsk.bgronvby/databases/privatesms.db-journalFilesize
8KB
MD57f10001d98dca1dcf35bf0d3ed5446fc
SHA12c837b77014a53c3699bbd55232833f5eb74b258
SHA2563b8ad50bc40e8d90d113e58aa27171398d55bfc5f4bea09b86ba35ecd4b9e6f8
SHA51221595a4a9c9d76f4040ffc15eed83ab208b212101fef1eda0f566b1f11e7ff3e9236fdc826e478f9b2d6784f02825893d506f21b657335d1f061898264e65e1d
-
/data/user/0/com.yxwkwcsk.bgronvby/databases/privatesms.db-journalFilesize
8KB
MD5b6d0d2ca8e5abe8f889d6089ecae4fd2
SHA188e8e0c6d33479448fb034555aae98f29e0eadb0
SHA256a2b6dbeb0c75cc615541d28c6336d09a19e23a0389ff751ba05d4d8258013c48
SHA5124d6dae11d155061c467b207671da2ebf53a55e4944fdd7ec0c645d4e6028ff2267e30163539844451faf4ea72c2599263d2e23b327ad8bb7a4dd67df9f4fd503
-
/data/user/0/com.yxwkwcsk.bgronvby/databases/privatesms.db-journalFilesize
512B
MD5f244c40a9f11e553aeb906a5bdda85fb
SHA18698ced91c7905da9c8343152e50a0a43ced6372
SHA256d7192984fb2eff73dbe56b8d8656059b98285f32b5d7f39af52cb7500d46aea4
SHA51239ddf5251445c05bb943b0a13d00c2250a6ab90fd6970128dd79b8b064820a64a97899b78998ac2a10f26fb89c4396254133cdafafdadb8d035a7b4e655b0d84
-
/data/user/0/com.yxwkwcsk.bgronvby/files/476639.soFilesize
145KB
MD5bbef4b886d31f635fe95aa0f3f789160
SHA17ef9f43a0468c80983c8989237349fe432a21119
SHA2569d226ec83b72c19234bc3ec3d3f3d5909758fd84f0fabf8ac1c1510893d0ed2c
SHA512a8606b5cc6db7b4cd3ac6d3f2285ed7bd60065e77d8002e4d907cb9e00525e5a0e411de330b7e4c154cca22ca78a6467302870bd941ac5d184353a504f3ed979
-
/data/user/0/com.yxwkwcsk.bgronvby/files/476640.soFilesize
270KB
MD5f45d6438e7da3be57f3c24d19ec9b578
SHA148a3713d7619b111da2fa4b03ddcbe77c0e968b1
SHA25672a300e5cf97f03eb4d93b1de0ec02d92ccd15e9dd1a2ce0d6cde387204d4194
SHA512ca242872dd28ed4e68d68e8a430e490f46762d333d4028aa6f3ed5b4fb7da9e3f4e8c79281703d811bd8fdc7b1f92e0fd18ee07d8f37cc155bb989b894200eb1
-
/data/user/0/com.yxwkwcsk.bgronvby/files/Background/black-wallpapers-for-smartphone-102-700x990.jpgFilesize
3KB
MD54651e1fd4234ee465d6fe6349f2e178d
SHA11a86fbd1edd11fa983155172d484959760c1fc0e
SHA256725ccd777793d5b05707aa28438b58a021c15b0f9cf47ace83aada6ea93a921b
SHA5126962571dbc91930f4624e3c80e1ab7a5ac23f8f13ccb4587d1619c5d5f8e9731974ae954e8b9ba2e86084f8e797c6a9d49267667a98e47bd7af9e0af29686b0c
-
/data/user/0/com.yxwkwcsk.bgronvby/files/dex/VIJPHPiHNvnlrRpCQ.zipFilesize
530KB
MD55149343a09071177d23c89604a770c5a
SHA1364d821938415340a9f1b83451520d925b104829
SHA2565c95153b2afeeef5a0f30d624c5b130782cfd4e23fb103eeae5a0b2bae33b141
SHA512c2170c720e44d0babbe23466222810969ce9d0c1beb04efc95cd5ac9932f7f98a39db1d9e4597667068de7c163307ad04aaf21038bea4d96bd8a208beab965b5
-
/data/user/0/com.yxwkwcsk.bgronvby/files/dex/VIJPHPiHNvnlrRpCQ.zipFilesize
1.3MB
MD5d7763f3233f8e9a0f951dd9464d748b2
SHA1991e68d99cb8f8a19f59d87bdfba1f8214ed117a
SHA256844be5451b49ccc7ae4ad12f9188151683cf2520e6a944482f86a2900e175514
SHA5127c76a39c88783d6363c7ff2b50ec64238cbc9304f34b557b2a9693224fffa595f84cc333541d6c0d9ee40956db553fb21b97fe0a51ddaf05959335d841daa208
-
/data/user/0/com.yxwkwcsk.bgronvby/logs/Sistema1715922915390.logFilesize
17KB
MD54810f4e7cda0fe9f5677519103603f79
SHA1b2396c836266f14a6231151aae59fd4f3699d94a
SHA256307f265f7dade4e14ec22cfe5c56d4b70f87dc0133ca295f9a378e0a1d878100
SHA512f4567dfe4fe50ad31c1329e014e4132f4dd48a174a81c017b4d680c21e51ac5e08e83ec702be1c65fdbf6ddaa499fe6d3cafaed0c4f8fb2df85129ffdbe0fca4
