Analysis
-
max time kernel
165s -
max time network
188s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
23-05-2024 12:02
General
-
Target
2.apk
-
Size
5.7MB
-
MD5
a874bf4c4364e0deac61461dd65f17d7
-
SHA1
0485f924e89be83c8b18e81fd160bc3bb4166ccf
-
SHA256
291262ce868cbc79f1fa9083a75c752221ecdf7f13b0c4f0b0464df604343c34
-
SHA512
7e4e6b593a2fffd140a33b575bdd47606d0537ad546a52fde80b29c57f2b774e72f05a533022dbcd1b576318ca8e38b91c7bf8ffc47757ae5ab761fafda89423
-
SSDEEP
98304:nAqo4gvFkYMMyL0py/kzM0yQfBwBm+PzQiwqiJWQz/mj8Ow4FKsxlVXG0XYKsxlB:njoKvMMyyMz3P2m+PzdzzoeIOwuvVW0s
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
io.dcloud.H53E0C7501⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD55291edae17c81a7909dc027d2647903f
SHA112e42bf8a5b39b6d9736abb9defffa5f5d6d0c12
SHA256dc093e9c4253c774619c65d11c44c6625d474ae2047320fc0396f11a38cac513
SHA512fc0817cd9daa23d49d25a09763a72614281fda171f69837731b4af810eb1943b638ccee85ccbf84c7a6807d6fd541e518f6424c254b1b75795310e85170ed62f
-
Filesize
335B
MD5585839d66722cfd02e40cb740cccb633
SHA1374c19200fee201b26d0153487a281a934615884
SHA25686a9bb4985cca6c9636c4fd071bef4b70ba7b3a5eb51af869a1299dc2b1574a8
SHA51209bbe1bf1455861fd4732f2d1945c84bac34090906ac2fab75d144c22ffcf6bc585c8209e94a2b1919c8402df53966081a1af2993e12261ae4c4ac5568667d88
-
Filesize
32B
MD5d6a6ad4d37f25e70d6686f0da5f4479a
SHA175986452099e4ae1ff6b11d93d7464f82001c84b
SHA25689581ed0677af28cf0e33957752c0db73807e634aa0f6042a0e27198dfa96ffc
SHA51200b53b7aeb82da7d02f99a2979094450614a9fe13dbca4e667b1d4c3a7665dc069082db1e5aca3497e295b15275eaa6930ced935b18dd74a3a21fed24f85e2ac