b1cc96705ed7fd0cda8ac0a9db55ee9469c53ef74920c11a1d4246a811c8f386

Analysis

max time kernel
179s
max time network
188s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
27/05/2024, 13:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Smart YouTube TV 6.17.730_1310_Stable.apk
Size 8.7MB
Sample240527-q7bsdafg86
SHA256 b1cc96705ed7fd0cda8ac0a9db55ee9469c53ef74920c11a1d4246a811c8f386
MD5 c096f45b50a7f6539ba41692e82acfff
SHA1 82553e24136c89f09de8a88336353b8b8f9848c0
SHA512 87ddac2f9db3c57b60872eba9cc4cdf64bf7521e97118f56190d438f15bb7d044ec1535412bd3bd7867ab0b237710513a2bd4b878d4c05255b053d0c77d1c292
SSDEEP 196608:1mdND5TqJe0/Oa6O30TtdGmTeDlfCLFAeUcsoie+LtfU:CD8U/O36tjeDI6bQ+2
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.liskovsoft.videomanager

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.liskovsoft.videomanager

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.liskovsoft.videomanager

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.liskovsoft.videomanager

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.liskovsoft.videomanager

com.liskovsoft.videomanager
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Checks if the internet connection is available
PID:4648

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

journal

Path /data/user/0/com.liskovsoft.videomanager/files/DiskLruCache/journal
Size 228B
SHA256 c95c151e48bc64731bafe7079e172e29858fbff91d9b7f1842efe73f4d80dd6f
MD5 14960c12afd3fc9ee763effd324c6e2b
SHA1 462e1e28056f4d872618ea4e2f2e648d59cc8323
SHA512 50751d0e25f7d3b5a093a080f2050ccae871de0f361e928f767bf723f2800699f8f22c3f37f4783d373269f3c7a0225843878315edc3e46b35554f4c20f1fca0
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/user/0/com.liskovsoft.videomanager/files/DiskLruCache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

on_init_scripts_270054647_1605206607224.0.tmp

Path /data/user/0/com.liskovsoft.videomanager/files/DiskLruCache/on_init_scripts_270054647_1605206607224.0.tmp
Size 122KB
SHA256 3998adaca3c2b7c1c6e8196514ad7100e42febaf8ab85a4458377fbca03ddae2
MD5 667687be5b96415e7820e8dd5eb39937
SHA1 e7bc6ec0364eb513684aad6b7aac19cc675336c5
SHA512 3dfb42452cf6f7891d71aae21e117430871f1da5e6104e9f066ec21619e230223280287301cab2d7b53b95a7c2b2ba4aa2f14431c98a4fd3a3ca6b49ad8fb809
SSDEEP 1536:bTjAk6tMXjgtgdLXLYXXKPjFtmpY4LHV4VdmdKaS/88OghlRTc41vKxeaZeJDa3u:bT+tQP6cjO/HV4VdP8oaoJklY
MD5 SHA1 SHA512 SSDEEP

Submit Download

on_load_scripts_270054647_1605206607224.0.tmp

Path /data/user/0/com.liskovsoft.videomanager/files/DiskLruCache/on_load_scripts_270054647_1605206607224.0.tmp
Size 21KB
SHA256 45bd37202d60f7053674ea149fc86c48f4c4f551f0002db800a87ca851d09909
MD5 707eb0d5eace78338de81b8820543f56
SHA1 86f3a199153e5f5d68a03d5770018e12fccb8ba2
SHA512 e9ea8a85b97d3a7811b49b5dc37f77ba6695c379c3b47381dd01fdeaa4ed7fc1012caa04158e6e2271e976016fbc48256c4fcbf2749d12427ee7af902afdce92
SSDEEP 384:UNehNP5QsNqkrNINGsNKNqNC3NnGHXNrNANi6ANDFhN7NYkx7yvLNYpdNN9:hib3X96ZqpdR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads