Analysis
-
max time kernel
25s -
max time network
152s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
-
submitted
24-05-2024 12:41
General
-
Target
app-release.apk
-
Size
3.3MB
-
MD5
a21c79214c61fdab5c2e9f9a473f5964
-
SHA1
50b8a3490d2e9949782390816acfc2e8e32d2154
-
SHA256
29c4df2985d600066bec2386d4cab9d19589e883426787e72cdffd430f7ead0d
-
SHA512
c7f374cb1e9cb17bdc4e399ce1c646632df489719f8246b3146ff6dd96221295d3edce336f8aeb3bce1806002d46df8ca1ce98849d0b0a02d36a7fc302a4552c
-
SSDEEP
49152:m+bEQbr7s0+VwJAhEUTf7xaK666I9BXFqbK2Mq4k+FhM5PY4wTqFooq9FgMCj5Gk:nvoKAhTfZnnmK2Mw8hag4wW29FgxYk
Score
7/10
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
com.personal.advisers1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available