Analysis
-
max time kernel
53s -
max time network
160s -
platform
android_x64 -
resource
android-33-x64-arm64-20240514-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system -
submitted
22-05-2024 07:38
Static task
static1
Behavioral task
behavioral1
Sample
Update Aadhar.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
Update Aadhar.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
Update Aadhar.apk
Resource
android-33-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
Update Aadhar.apk
Resource
android-x86-arm-20240514-en
General
-
Target
Update Aadhar.apk
-
Size
4.9MB
-
MD5
341b442187e775c210f51daf8da2ca49
-
SHA1
ae049184d4fe9b95fae57ba1748f0dd5899eaea8
-
SHA256
ec2f59973066508a4e5d6b962e86e847b1686205e9ee1585b150f3d210fc97df
-
SHA512
b5b683087838c6b7dee696900310c8fd9417d7ed201f88a4c1984fa5f8287994422c4abd10768f68f665173fb9459b3b5dfd105e4b3a72a036225ae1910c8b44
-
SSDEEP
98304:jkWT4ssus2bgXHP3pMAcLD0JZvlmMLKBkjuBj1ol7ESY17D:jJTjbeRMncZ2xBOEf
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.my.newproject46description ioc process Framework service call android.app.IActivityManager.setServiceForeground com.my.newproject46 -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.