Analysis

  • max time kernel
    49s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 12:00

General

  • Target

    Test-1_0_0.apk

  • Size

    3.0MB

  • MD5

    c1e2ad44438d113fd0941e73a7fc2f29

  • SHA1

    b3b79f5b5c4008bbe9955fe2019d9a5e56581a2c

  • SHA256

    ef826134323e865afa4c768204d518f8e742a77a9867a7c83c4636697336f236

  • SHA512

    26ef6d8824bb4de611cd3d13e7983ba7f5baf110ece0fb5e4e6b112edf9047f2bc75afbd9d834c54dbb2682c7de5f0ae87d34247f5dfc065058f2e1d1bb49b0c

  • SSDEEP

    98304:vYUlu7Z0/RVLTfLEsFxsnYQRNjT8GjhcWbQ77G:vTcZ0/LTxFbQ8Gife

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.example.test
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads