Analysis
-
max time kernel
1744s -
max time network
1809s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
02-06-2024 21:13
General
-
Target
roblox_modz.apk
-
Size
756KB
-
MD5
e72eb8efd08624921e0e97472e28eeee
-
SHA1
39f4e01c4866cdaef5e4b3bb009ea2360107e0f6
-
SHA256
fb3d9aebaf5904faa165667690a72728521ed91a124f4d654587443cc20a414b
-
SHA512
ec826ee268b1694a802d4fa35609160e62b22254b28eb4dc1b3a428bd1ff24c00851d802ae57beff804d14fa87fc7c6167e4a1ae18d2bc1479bdef7ba6bc1e53
-
SSDEEP
12288:Zjq1ivaxzaEREo882tc4M90CHZAtd7Xoc9E6fKCs/KdFusT3cgtN0FV+6Rq21+zS:ZuiCI9+h4MJK4aC4FHT3SFV+GNjitI
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes
-
com.appser.verapp1⤵
- Makes use of the framework's Accessibility service
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard