Analysis
-
max time kernel
26s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
24-05-2024 12:56
General
-
Target
origin.apk
-
Size
3.3MB
-
MD5
fc1c8fc279e20bb9991caa991964d111
-
SHA1
a85f47baa878b0453abfd39b139eb085f474502d
-
SHA256
1f8b90ceb13e0d9103d3adedf1eafb026c7223dd5bce4fae8d56d719e19f478f
-
SHA512
6b028ecd17fb5b65cf455cb18999617418a9c139a2d4f6f9bcbf189640df3635e30bd44b76c7d9cd592a6d6e1822993e7e0a745eaa9e8f58192356b2464aca8b
-
SSDEEP
49152:ypTiqNCp92ell5BOI9RbxEp9cvCQxz2/q0/5iGQ5mxp9aBkB5GcZgb1:YTiqm92aVRbQ9cvCo2SCcGQUkkej
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
com.vanguardgroup.vanguardgroup1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available