Analysis
- max time kernel
48s - max time network
131s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
30/05/2024, 23:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f17de7abc290efb7a34b7abc82184af19d1a5daf7ac4d101a9d6f9297c202b8b.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f17de7abc290efb7a34b7abc82184af19d1a5daf7ac4d101a9d6f9297c202b8b.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
f17de7abc290efb7a34b7abc82184af19d1a5daf7ac4d101a9d6f9297c202b8b.apk
Resource
android-x64-arm64-20240514-en
3 signatures
150 seconds
General
- Target f17de7abc290efb7a34b7abc82184af19d1a5daf7ac4d101a9d6f9297c202b8b.apk
- Size 3.1MB
- Sample240530-3je64sec71
- SHA256 f17de7abc290efb7a34b7abc82184af19d1a5daf7ac4d101a9d6f9297c202b8b
- MD5 c7ecd76fdb4a58c08da5751423d0a641
- SHA1 eac49f0209325ddc736606756666103e3b8c9b81
- SHA512 b6a924992b9acad32392775db6dd9c667280b2a9f62a1b811b90ab5146ffb07e287d71fcb74727e50f06a4e0e206da47a230412234ecd8f4817c8352bd157b7d
- SSDEEP 49152:JgORVqs8OaoAak37RqjUnEPIkgYfcgI7ESYD1r7wxqCDNr0z8gXVhhrESN:JrRVqia7xFqw/L7ESY17kMhhrlN
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.smsreceiver.dhruv2 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.smsreceiver.dhruv2 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.smsreceiver.dhruv2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.smsreceiver.dhruv2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smsreceiver.dhruv2
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.smsreceiver.dhruv2/files/profileInstalled
- Size 24B
- SHA256 6ac55df693d774e9529457cfc0126abde5f1fafac946cce6dd3ad93615733d35
- MD5 87984975a48aa8dc7ece305299e73555
- SHA1 40116fb2d9b5dbab01a0e972ac544393c7074191
- SHA512 ac62858b700341f5dbd28dfcce801a07b2a298510678c43721af1a845ec22ee507b023ec8e80d8534034265cf7acc14dd94989ff48162a4388f4fa9fd37e958c
- MD5 SHA1 SHA512
- Path /data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0c9a3292fa425898d20f4061b65d1f3bc31b5996bdb280ee3666418a1bb48982
- MD5 ad85761453671c87d2c4d96b0101dd17
- SHA1 33f5c28f2fcddcf093f3eaef9da3e5a24d82fab1
- SHA512 44c69f956ffd9667c39cb7543de6aa32b5e5b5057702066d022cddcdad8dd8ecc0e15b0937e0d8b4ee7aceafda4a291bfdcdc61dd93b95c86a8dac5d888ac8d9
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.prof
- Size 1KB
- SHA256 c07b4f449ba8b50c699903f614e08a0820d6a96540a23b8f7e4f49b30a518b43
- MD5 e8611da36b6531c4f98ba98f5fa0fcbd
- SHA1 5a37eb01623a4aa2f8596198e5485a628d5b9f25
- SHA512 1ed6ae3fc0074fd8d3a3061fce8e1bc9707d8ff4182c56063065d04aba48816d0eb1e682416098453fd537ca91b2239f56ce8591520a5cb75cf78b96b05821c2
- MD5 SHA1 SHA512