Analysis
- max time kernel
155s - max time network
189s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
24/05/2024, 14:36
Behavioral task
behavioral1
Sample
6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb.apk
Resource
android-x64-arm64-20240514-en
3 signatures
150 seconds
General
- Target 6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb.apk
- Size 1.9MB
- Sample240524-ry17cahd6s
- SHA256 6b4d201bfe3ec7b7e235d5218d88d98618fc5535961342f0a9c3d7cb529ef4fb
- MD5 6dd64369b6847899ce283cd0ae6bdd60
- SHA1 67324744f73392903a0f89dda8e4d81741d32f53
- SHA512 322e22b3da8c98f92c7eabf3815c3f8da551541f3a28e623b13c1c686d28d5e46057bffad33c07a5eccb40038771dfcfe02872380b4df74a7c8d2f3e9602f724
- SSDEEP 49152:LwuyKaz4XDNj1Gd5gln6l0jY7+IwvXEE+yD:YKaz4d1O+pjY7+pEUD
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo video238.sex.movie.fsh - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo video238.sex.movie.fsh - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener video238.sex.movie.fsh - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone video238.sex.movie.fsh - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver video238.sex.movie.fsh
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/video238.sex.movie.fsh/cache/~test.test
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /data/data/video238.sex.movie.fsh/files/BanClicked.txt
- Size 5B
- SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
- MD5 f8320b26d30ab433c5a54546d21f414c
- SHA1 97cdbdc7feff827efb082a6b6dd2727237cd49fd
- SHA512 af1aace54ec0ab736f8a6a262cc319740beb89d04efe071d451522e2cdb210bf0c81ae676ebc45781935cc18a3b939a6645b2ebe0a484e2594d672d81460b3dd
- MD5 SHA1 SHA512