Analysis

  • max time kernel
    28s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 12:16

General

  • Target

    Manirampur_EDU.apk

  • Size

    3.2MB

  • MD5

    76bb1ec4317362393d6e3d47106d3731

  • SHA1

    773b7737fb25386533b4139d6b3dbfc11e576845

  • SHA256

    cb4311cc55a6977e9631d9ea78ba13c3d1f2dde092be795b89de6d5eb8e4131b

  • SHA512

    6924346506d0dbe7845f01b4fb3c71c0085d4632b3f760845eb5f4bd27102363e403f62b4275c78d9a3af2d753db4da508c91482edbc42f8fd485c7924903f0e

  • SSDEEP

    49152:xE6LSPSfwjH1/Wh94+mwHo9E9qsW2wRpn7R7OX0wP4c3LRKemIsLj8n3pyddqB2Z:idPJjHYhu+iV31OX0woHIsJJhaSf

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • appinventor.ai_jitsolution24.Manirampur_EDU
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5104

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads