b5e5c9c3f01359960111499aade4e44a0d6516748da78a7193e3f5eb6d7cf204

Analysis

max time kernel
84s
max time network
92s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
25/05/2024, 03:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.smartpcx.diccionario.apk
Size 11.8MB
Sample240525-d8832sdc6w
SHA256 b5e5c9c3f01359960111499aade4e44a0d6516748da78a7193e3f5eb6d7cf204
MD5 d6e69ece2527dea82145027205256557
SHA1 ba3c331fed98d026e521ec0cdde3fd8c5c5a5613
SHA512 35f2b32fb24b69ce75ada63bbaab4dad888df7fe67c713c12b4afda0f1f1f459d4e855f7aacb0a985ed14b5a373cc1eb46a7da8a753a87d0e58ae760009bc713
SSDEEP 196608:9PSTHQlJ9QfFGMhhlahRI4fzz3KIxNMV4QOBVj+0xPMYBMqen5AJhdxE/M9uS5:9PCq9QdGUahRI4fvaIf24QOH+05fMbnE
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.smartpcx.diccionario

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.smartpcx.diccionario

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.smartpcx.diccionario

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.smartpcx.diccionario/cache/1582435991586.jar	4615	com.smartpcx.diccionario

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.smartpcx.diccionario

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.smartpcx.diccionario

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.smartpcx.diccionario

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.smartpcx.diccionario

com.smartpcx.diccionario
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4615

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

1582435991586.jar

Path /data/data/com.smartpcx.diccionario/cache/1582435991586.jar
Size 9KB
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
SSDEEP 192:uGJqbQwgQYuNUnEV4bAa0s/ombgmdxjX5fGpTVHb3qX:LkMwTTNdlns/ombJB
MD5 SHA1 SHA512 SSDEEP

Submit Download

1582435991586.jar.cur.prof

Path /data/data/com.smartpcx.diccionario/cache/oat/1582435991586.jar.cur.prof
Size 84B
SHA256 a16aac2643c8d37ba5639525d64e8131bf0b8eca5dae8c395cd57c427c8775df
MD5 11bab8b0c9fd6d144a0bd8fa49e9f265
SHA1 8b06d3601efda549c51825fe2f080d0163790292
SHA512 f3875bea35bcae48f95b9bf0a8dc6c082aeb883e2d6de353d01ac0075915521010e1994500a96cfeefe402d0b9d9eb279d967d6716a6a41a5dab11cf3b8acdcb
MD5 SHA1 SHA512

Submit Download

BASEC

Path /data/data/com.smartpcx.diccionario/databases/BASEC
Size 16KB
SHA256 569984c623bc3bf26eab9ad11ba9eb0bd8faa310aeccf03930a5fc71d9820174
MD5 3555735db2e81178b98316a746af4cec
SHA1 61542e97fa333ee6f79301574a8bb50597f09fd7
SHA512 7c717d9392fe9ce8cf9e17130b05bb83d8aa8e4853ed5d4e2fb06e3c968f5f28feeca13d7987183e861b721c302de6f9d56c1b4b84dfb6f1487f7d84d8c3c9b2
SSDEEP 12:TL8unIRhwBoI4CCDZJM1YPFd8iJgRmBEyPbB2:TLdsZIuJMWFdXdGSM
MD5 SHA1 SHA512 SSDEEP

Submit Download

BASEC

Path /data/data/com.smartpcx.diccionario/databases/BASEC
Size 12KB
SHA256 ac201fb394b36d915b894118fc8eb7e21ff8ab7703c2c2922c2a53563305a70f
MD5 9128764368a2c8b05396dc503087414a
SHA1 734b655245dff24115f8f37fa22a53202c01804c
SHA512 48dabe64739180f207fe2e1cd29f2a0b547115976aaf80e1931ad336e7a4948ae9eed72a33951a4d1792e32b11f4525a1f3252eb466146f284648fd885d667bc
SSDEEP 6:l9bNFlqhKtT/kPlOERX4PBX4ogLugMBX4suuKTqiOw2:TLmNRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

BASEC-journal

Path /data/data/com.smartpcx.diccionario/databases/BASEC-journal
Size 512B
SHA256 9a9812027a0835619cf52e24c6d9dac5b596a28eb4ae5e04fa1dc90c49325ba6
MD5 efa49ad3edc92a5fea3928d79da82094
SHA1 d1b5983d0e1809452b9e7a9677bd821b1b0b75a4
SHA512 7fa4607f10a2f6cc27a740b660ae2d347b7da3aad5402d34fff72ced91178f2926ffebb3332715e93b237eaf3400de7fc98bdef7a72578fe50f91bd952f8303f
MD5 SHA1 SHA512

Submit Download

BASEC-journal

Path /data/data/com.smartpcx.diccionario/databases/BASEC-journal
Size 8KB
SHA256 4e5a2543f614255b742177b36028a44402d533f5a40dca2c6c8f4c31bb6a7677
MD5 8ad4026411c295831730f158e7ee63f4
SHA1 e364d123ac8ca23ff302931263b03d67e6c3f1a5
SHA512 d9bb58f6c23e4b9832270bca0555787fd5908ee3890531ee355be68e23707de500ba8c4e0bd9a7800fb80505e75ce7805324cccbb58df654fe40b5cc6bc3eb10
SSDEEP 6:7+/l91UHn1NW2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK8:7+tvkW2vqLiuWdYRmBEyPbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

BASEC-journal

Path /data/data/com.smartpcx.diccionario/databases/BASEC-journal
Size 4KB
SHA256 ba3204e9962532081f1975c3cdcdc64bf5b65d17eb08940eea024b4f8ed779ed
MD5 6c31ab2602df37e5eba4afb7b0f975b2
SHA1 649a3d0258845a8fdc9f4fc88c3f585cb5ea3fb8
SHA512 c2b10de2db82c5626a552a596d22abd59703e93947c005c3ff9f26c33f38e9ddbbe160a2600b5b681eb1628687b21c82772f1a2aca592621c97053d7423542bf
SSDEEP 6:7+/l2TPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKaen:7+t2LqLJdeWRmBEyPbgn
MD5 SHA1 SHA512 SSDEEP

Submit Download

BASEC-journal

Path /data/data/com.smartpcx.diccionario/databases/BASEC-journal
Size 8KB
SHA256 b1f97da36e91c70224cf083a3478b8091fdb499917b14ad68f079805e02ad45f
MD5 1ccf41b07c3c9002345076d66895d2fa
SHA1 6a0e3b18d543158b9d85fc1e315c6ff335108fd3
SHA512 666da8c14f7b0ea65e9f9c6f57180e89e01deb45259d82e1a47dae410049df70619ec6b7b47197e29e84ffc440250bb4dccbc48656b7259e0d08b476d0971ddd
SSDEEP 6:7+/l9ndgPg9bNFlqhKtT/kPlOERX4PBX4ogLugMBX4suuK8bBs//f:7+tFd4qLmNRmBEyPbjsf
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.smartpcx.diccionario/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.smartpcx.diccionario/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 0bd95f7c74bb4be91c48ff95e43687907ab0a47befa62b9549fb77453d64e77b
MD5 b0bd148a81c88f533e5e4bb207fb2888
SHA1 80938c19d3bd286a85f95e09f85e958abf96b93c
SHA512 7307817d7d01f7ddf9e7c2b711e72e67b13f826552e533d1828e94f8342626af27e4a3a4e44f30cf7a2f4541349e11ef2d5b89ab691a00989fa052651edd2ca0
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.smartpcx.diccionario/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.smartpcx.diccionario/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 b60289ea61075b484bdfbc477c9221470a7d0b55ce7029b45ae987382e929b6a
MD5 6365cf732b93dd32b05515eae8c60fb3
SHA1 4a720cd45cb00cfafe8ec8c7da6947b151def3f1
SHA512 0a1325b845c6308af1b81c66a4b61f0a9ce174ceb8580b82c30389af3b2d76683c40ec4f1a8b0aed53e839632337ecc3454d040710333e3b6ef82500c784b3d8
SSDEEP 96:fU6+hdjnHtDRMpf8UzS6+BD8q0ExPGV1l1tcvfqtne5HGHDWsukiD9:4djnHt9Mpf8UzS6+BD8q0E5B
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.smartpcx.diccionario/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 52a9286c943a1bfb5ca9b6c8f75e0623392d7a4077d16850f14258abbecc520b
MD5 ee1ed459a11101aeae62d39ceca53e9e
SHA1 b10d140e0f6e67075fc2b1abe5ca7a578767aa06
SHA512 a35d4e57729df5ba31e067275f9c1b30222406320a1275b6aac3beb061237ddb98b8bc2fb6922c26fa40896e84a79af0a6f446e6f4df9421f9ceb9f9e195185a
SSDEEP 6:KEjOVFvg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/uUZmQjX03rEEWOw2:KEyVYzdeWRmBEyPbP/uSDoQ5Ow2
MD5 SHA1 SHA512 SSDEEP

Submit Download

1582435991586.jar

Path /data/user/0/com.smartpcx.diccionario/cache/1582435991586.jar
Size 20KB
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
SSDEEP 384:Za0jn+huC5sMvRuvypj6f2ZzJgm+poK+l8m4qxXpj/7wyxBLBiok+9VQ3AKm8:ZU5sMvu/f2/gm+pDAPzj/Dip+9y3AK7
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads