Analysis
-
max time kernel
49s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
24-05-2024 12:48
General
-
Target
PDAWY.apk
-
Size
2.7MB
-
MD5
9f4acd0e1ff0bbcafab954577f348edb
-
SHA1
0259c8c47cea6fbd711a08b5f2cb8f6ebd57e8fd
-
SHA256
103205f802af3ef730855199b70142b00b283d1bcb048d380a278d5b5ed91b2e
-
SHA512
5dc1053675c122f53df89ec9403c9bee7d3b7b1fecf1bbba8ba19e724216624306d90ff963b521582858d82beabeb521f8739462a8540320556d20ab1483a8d9
-
SSDEEP
49152:R7GxzXHWrhwvY7bgBpCPKbqozwYdGwJxZOah8TJkgkfzz/fbsrOvBHTTOTQ56Owk:mL6hoY7G0PKbq+LdGWZOa5zTT4sTv6pw
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
gmmc.gzgi.gmmc_fk1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)