57a450178fd89e8627d42dfe61c61b5a505878ac0467d4717f3a69828d641b01

Analysis

max time kernel
49s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
22-05-2024 12:18

Target

napp.apk
Size

2.0MB
MD5

d397d26838eb574e57971fc5ef6783f8
SHA1

0e927d7bc1808e6071818d67c7e89d6cb25c8a6b
SHA256

57a450178fd89e8627d42dfe61c61b5a505878ac0467d4717f3a69828d641b01
SHA512

be8a4c073c4066ba1001e65d76e85f269373f6398c7cc327ea36ca3472c842a5a3c25ae09836d9dfd36ac2b11697cdadc4c99e6d53d40e97347a555f309bf544
SSDEEP

49152:zk2vbh3nt/pIM66625KShamH6uFjUdBO93PkHg2A2:zk213tpIM7XKsH6uFjCByMf

Score

7^/10

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.example.brandom

description ioc process

File opened for read /proc/meminfo com.example.brandom
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.example.brandom

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.brandom

description	ioc	process
File opened for read	/proc/meminfo	com.example.brandom

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.brandom

com.example.brandom
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4420