568de3c7fb984e6ef7ccaab250569a7089dcff99363dfa893d8a1b7907ae738f

Analysis

max time kernel
19s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 10:08

Target

wmdex.apk
Size

218KB
MD5

10f86308007af214ab91bb51959e79b2
SHA1

e5941345f960034d35e0652bc7fc76e95d99773a
SHA256

56a0b304c8c0bd513090e2b1014012f33b0dd600c0a3476bbef262dc22119192
SHA512

d65db3d4e552288246f13ae3370a0940b24b978c8e71f7eb5bde05ca55fb731f2e9ac6946ec1327a28f73f4cd10c66255dff472c9cdfe357b97b6630ebb73d54
SSDEEP

6144:K7u/DHpzqpdlFDQ2wfslBJR+D7hv/F6A8DykFr:2u/DHhqpNafslf6dAYkFr

Score

7^/10

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.wangmai.allmodules

description ioc process

File opened for read /proc/meminfo com.wangmai.allmodules
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.wangmai.allmodules

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wangmai.allmodules

description	ioc	process
File opened for read	/proc/meminfo	com.wangmai.allmodules

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.wangmai.allmodules

com.wangmai.allmodules
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4575