Analysis
-
max time kernel
49s -
max time network
131s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
24-05-2024 12:36
Static task
static1
Behavioral task
behavioral1
Sample
spvHMI.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
spvHMI.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
spvHMI.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
spvHMI.apk
-
Size
5.3MB
-
MD5
118587e225bf78d82cfc1f558126ae77
-
SHA1
38eb1a25f62eb7ae2ff26f0c485a61f4829d4605
-
SHA256
564e8fae796e5d28c75f10bfdd1e4c898078a4bb6d970fa47b225f2d80a819ae
-
SHA512
b836dbf9dfe9ca23f5e0882dd79d3645c762d87c0f67a996d0023038cdba3d31537f42f25750dd098fb5358681a39a1cad4e07cba962663bd5172079c2905abf
-
SSDEEP
98304:vFqgLCrS2h/NvTcrkmERyJciXXDvlTveakuN3CYuomPWU:vOh/NmKgvlTvea3N/U
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
com.apator.spvhmidescription ioc process File opened for read /proc/cpuinfo com.apator.spvhmi -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
com.apator.spvhmidescription ioc process File opened for read /proc/meminfo com.apator.spvhmi -
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.apator.spvhmiioc pid process /system_ext/framework/androidx.window.sidecar.jar 4549 com.apator.spvhmi /system_ext/framework/androidx.window.sidecar.jar 4549 com.apator.spvhmi -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
com.apator.spvhmidescription ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.apator.spvhmi -
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes:
com.apator.spvhmidescription ioc process Intent action android.app.action.ADD_DEVICE_ADMIN com.apator.spvhmi
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b