1cfbce677f2b28f0135e9270a676fa30d930872b3a974be7481d566e6f2e52b2

Analysis

max time kernel
94s
max time network
152s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
04/06/2024, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Stanbic IBTC Events-v11.0.6-appsonwindows.com.apk
Size 14.1MB
Sample240604-pn4tdage39
SHA256 1cfbce677f2b28f0135e9270a676fa30d930872b3a974be7481d566e6f2e52b2
MD5 92c1cddef1187865a04b2b500d35f0c6
SHA1 91dea787574cdd06d05a82a65fc7d28b953a3fe1
SHA512 b4a45e472958ec88398e7c12ce0e3e0c39dad59730b135f1f005b301252470dad481ebbecd123c62afa0b526f9eb2fa47aa83f9e628cc02e7de4be253aa22adc
SSDEEP 393216:YJG3Z68hFGSCfgvQ8G4uR7LOY/Dsl3klwT9tWL4B:/3Z68hu4vQt6QwTX
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.reinsys.apps.conferencing.stanbic
/system/bin/su	com.reinsys.apps.conferencing.stanbic

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.reinsys.apps.conferencing.stanbic

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.reinsys.apps.conferencing.stanbic

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.reinsys.apps.conferencing.stanbic

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.reinsys.apps.conferencing.stanbic

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.reinsys.apps.conferencing.stanbic

Checks the presence of a debugger
evasion

com.reinsys.apps.conferencing.stanbic
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
PID:4547

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/OneSignal.db
Size 52KB
SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
MD5 e50e029ec0226f794da6d3fc0535d4f6
SHA1 027173bb3c775e8ee027c1e22930d9b1607195c3
SHA512 4f12a39bd359554fccacb8ac31e2276c38fa69a2de927f43216c9012bd3aeee0e1a0f47a48d114c6e45309e069cdd5a6979d90d21f2e60f0087f42b8364672ca
SSDEEP 24:TLLSaOCrUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvFqrEqjUi7+xGTrOPjwV+x:TLOCrQcrA0oJtqracrObMoOS
MD5 SHA1 SHA512 SSDEEP

Submit Download

OneSignal.db-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/OneSignal.db-journal
Size 512B
SHA256 4019d854d52e59b2db2e2e565dcd39bbea2a9c6561ae4ccf3f1384f49eab5d66
MD5 afc8ed17511e8aeafefc1f205395f1b8
SHA1 fbc06e74c220ae5d333402871aa02ba87aa74674
SHA512 db464d434bbb7753dfe80ebdb51171c964e3f3f5d8eb4525b91050a526c314c8fe081761eacaa0bb349589b3a8736712bec334eca6ae50447e3dd217e5ed106a
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/OneSignal.db-journal
Size 8KB
SHA256 4431b23c7ef5d786a366849f32c77aa81caf2f6b4b5c5f7d20bde2083539c1b4
MD5 827073cf8421dff3369cb187d9adb7bf
SHA1 aabf737c8584b3c6ad395ec58da0615e4631f2d7
SHA512 78c321c7519c72f5b6c1a53b2bec58dcb655eaff5353e3e6321d0125f35d6e0d066596444fe764ee0fa09d70d5efdc61f8796937262ee0aec445f03a74990f54
SSDEEP 6:7+/l9+0Fn1Gg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKT:7+tJyqLiuWdYRmBEyPb4
MD5 SHA1 SHA512 SSDEEP

Submit Download

OneSignal.db-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/OneSignal.db-journal
Size 8KB
SHA256 bb91fcc13554e0366a00fe65077524eb549f179dd174181504b06c17f18cc379
MD5 255246798550eeee57714173f34cf6e9
SHA1 c5ad9a4983e25d94a8199101aefa30799ced429c
SHA512 4ba3a0f1dc1ac1deae47cb3dfe1dcc61c95b48c1ea1da234fb5f34d1897fd430c5169dcd542fdf438c66f615c549473fa2b057fa85650e6a555785c0071870a9
SSDEEP 6:7+/l9SaKOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKda/aB:7+tcMqLJdeWRmBEyPbHs
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/com.google.android.datatransport.events
Size 32KB
SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
MD5 7daa8bf70cba1177c0aaa35143f5ff54
SHA1 4ddb8e3e373296808fd5a3832a454ea9c0c60b0a
SHA512 7178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f
SSDEEP 48:TkSZ59MEoBdUdndVd/7d5IvdldHlq8/JqFS:ASNMEo0LIyNM
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 75520a05649497a3ef9254db0c1e0ca9245147ff1b7384e75ca1918a032aa6f7
MD5 d03951808a7042756719968da9dce2c9
SHA1 94f37477402393d170bef619b0c7ca6bd3635cb1
SHA512 c79e94c7aebfb4644cfe148ef2cfb49bad3c02f1b92ab61b56b3a4cfd039d0939f4b631fd33a21101cdd2faf0345dc56de4f863a5a93e025974530837b72a7cc
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 ec83d542ac9d9ce004c2da5d7b8017e47936338e3ea62d2fabecb2e6be1905ca
MD5 d81c923d84c17dcd700bda8a39a8feac
SHA1 759ede3317c5c7a59a3c8dfeedf65a72570aa39d
SHA512 115963926af51c4afebc2a815d9af3ddaa5cfd8881d19dcc7de285be86787ae907bd8c14fef11a0713bc28afd1c73aeb715a6baf087ecb295475f371b31bcb07
SSDEEP 6:7+/l9eon1GwYlfg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKZn:7+tYeYRqLiuWdYRmBEyPbSn
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 69031e9d9cb65bbb5988e12f5c49af2f157bf1bacd0178c6cf488249784668c2
MD5 9d884439785f3f59910485f79d2e8e79
SHA1 39c6af42a7dadc09984bf48ec51adca928d4579a
SHA512 3caa9e60c8ac5d7bd65b8ca9f61ca3ec0b7d21d2724323cc2c9f3a85254d64b868dc3879d55ec0f0c07311e06919f31a8959ce6ea760e0d2164fe9cc467a4225
SSDEEP 6:7+/l9FvPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKu/4T:7+tXqLJdeWRmBEyPb5e
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation3998218378400203318tmp

Path /data/data/com.reinsys.apps.conferencing.stanbic/files/PersistedInstallation3998218378400203318tmp
Size 570B
SHA256 5b232063a3b3f6acfa46bb82455552311cfcecb19f653280bf6ca436040e57e5
MD5 03357c9abb4c165402c34c8edb4eaf08
SHA1 b65b9ad8a714ffaddb29af404170ca312439f9f5
SHA512 703c241620b163db447feb7b6b12b1db40f36ba5af173976f38e91581ce028118de1498fd45de1b4ca801e5a2c13dc903322ebb0552f63231c929c379e2a6b91
MD5 SHA1 SHA512

Submit Download

PersistedInstallation6073285664914998860tmp

Path /data/data/com.reinsys.apps.conferencing.stanbic/files/PersistedInstallation6073285664914998860tmp
Size 90B
SHA256 e2288c3b69be78b5740d0e065e7ee2f1db7e224971881031650686439ed916dd
MD5 d59533a05fc90693b7e65e38aeff962a
SHA1 35c95268bbd1fed65ebcdc5f547ad7423f04c6ea
SHA512 625b98ed4881c3ac3cf3fc2ff0ce5f448562ebdc2dc9badcc352f79b4001da1b42e79834438ec7e47c5dd9123b3b971773179f781e20cb83af40a102e60347f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 12156a9d7ee7213d7b0b789eb80107224999fa380f6140d984bcaaa3ddc9eb16
MD5 21db93d07a966971e986b6f53265bce9
SHA1 7c1a47cbeff569fa9650cf78bd34d09d6e534bcb
SHA512 905a42cf3620fbcf8475b40b97f6a57f973161de3d3bf37a1602133b2fbce679208d668ad1ff40a10a36beeba766f52ac904c0c35a7177420e2ce54f58b2ae4f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-wal
Size 189KB
SHA256 d99a0cda0215461850745b026c2c7dc9363fd19f4849d4831ccf628b471347b5
MD5 7f20090c0935dd230774efe280d914a1
SHA1 90abcb97a276e91061a05c36b0a3b463e1edcf73
SHA512 fd29b47e16a7a051bb68982e98e431aef75c8ae4d3026edf973a892b71dee44c6debc795174e59ababbb5b017d96050d10180d1188717b53e45cc69f0713e96c
SSDEEP 96:wE21DtYjEpjE5uKjukBE21DtY5eyskMUqE21DtYm2bE21DtYP:Q1DtYmCV1DtY58kY1DtYLT1DtY
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 6ff6dfc0210829ddbd6dc3ab23a43daa71a8c339ddd6a4b07225677e874f0d08
MD5 5fa7b6979dab51f9b4d4d247055888e3
SHA1 2bc028c7a8151568d2e6537a51319ced7770a6f1
SHA512 55609e5f4c09a32943804ed0fe618f72df35258ddeeec1aa16989e572d05eb74916dda92afbfc6c203133f66e7f9b20f6cf806dee33373c39f3c3875d6ef50ea
SSDEEP 12:KPn3n73zdeWRmBEyPbP/xnvsy1t/+y1/5Ow2:KP373zKGSP/xEyL2yf2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 f9f20e7d1a9852dcd70ee209dee9394dfcfdd9fb9e984a1e3f484960bb03c98f
MD5 a23ebab71410de72c4ce7a3302136fa6
SHA1 2f72a778e2e07bb5ec8a941a9bbc1a39a4c334b3
SHA512 e94c61c9366f707d67448437d538075471bb1be53b76950c0fd3a52e3e326555502894e4d6ae1b5a67c0caae4144242d4f8e25c9d83bec7cfb727c5a918fe538
SSDEEP 48:0FY66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9t:q6+hdjnHtDRMpf8UzS6+BD8q0ExPKlGm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads