Analysis
-
max time kernel
48s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
23-05-2024 11:50
General
-
Target
TUTOR_SMKDIRA.apk
-
Size
4.8MB
-
MD5
8bfc2bc24bf25ca8bec0802ede3fe91c
-
SHA1
aa301aa4dde8cfe380cd6d27bcb4adc950684e7f
-
SHA256
a92904c1b44a2c6f9634f908945bc431d6ba131c6a3615a6450a03332728bf45
-
SHA512
5b22be96b13d49e49e4a652f696a034db81a81860ba0adba8cfaa4d3c40b52c2e8008b5514560b73a59070c918eae1a763fd48136dcfe5ea82aab3a65a37d682
-
SSDEEP
98304:UerQo1mNcfpSGKQdCGKl/kX0ZaHRFhakjWdlPWHc1jq7/kbNKjFOF6Pw3j:MSmoSGKQdhX0ZaHjXKLOH40jFOFLz
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.smkdipo2.rawalo1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)