Analysis
-
max time kernel
49s -
max time network
131s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
24-05-2024 12:36
General
-
Target
spvHMI.apk
-
Size
5.3MB
-
MD5
118587e225bf78d82cfc1f558126ae77
-
SHA1
38eb1a25f62eb7ae2ff26f0c485a61f4829d4605
-
SHA256
564e8fae796e5d28c75f10bfdd1e4c898078a4bb6d970fa47b225f2d80a819ae
-
SHA512
b836dbf9dfe9ca23f5e0882dd79d3645c762d87c0f67a996d0023038cdba3d31537f42f25750dd098fb5358681a39a1cad4e07cba962663bd5172079c2905abf
-
SSDEEP
98304:vFqgLCrS2h/NvTcrkmERyJciXXDvlTveakuN3CYuomPWU:vOh/NmKgvlTvea3N/U
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
com.apator.spvhmi1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Tries to add a device administrator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/system_ext/framework/androidx.window.sidecar.jarFilesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b