Analysis
- max time kernel
50s - max time network
154s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
22/05/2024, 15:14
Static task
static1
Behavioral task
behavioral1
Sample
Cylcle_of_Corrutpion_v0.2.0_Android.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cylcle_of_Corrutpion_v0.2.0_Android.apk
Resource
android-x64-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Cylcle_of_Corrutpion_v0.2.0_Android.apk
Resource
android-x64-arm64-20240514-en
4 signatures
150 seconds
General
- Target Cylcle_of_Corrutpion_v0.2.0_Android.apk
- Size 376.5MB
- Sample240522-sml4qafe95
- SHA256 c1bf9a963b8c1f5f1c84b4032ace5cdde012ae7607c1d0d9b85ebb8daa031521
- MD5 d4bc3e7a7fc31eaddf58a543b95b10a8
- SHA1 189a3d94d5afd1fd72b8b6e19817015d7f11d805
- SHA512 007752cefde303730ce03eebcd793e36b38684b560e54b2fceba9cfbfd3129f8da1b91149b268895791f59b552ba91d94a3b6a56874cfa008d242d590eab0218
- SSDEEP 6291456:EfpE+28c5SJA+vf08azWjeVUHCC5IGpYoSxELk75dSRqv+JmAnw9ijbCUvMwuSXn:E++msd0Ije7mpY6k75eqPAnwgn3Sy6Cp
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.Kredyn.cycle.of.corruption - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.Kredyn.cycle.of.corruption - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.Kredyn.cycle.of.corruption - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.Kredyn.cycle.of.corruption - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.Kredyn.cycle.of.corruption - Checks the presence of a debugger