Analysis
- max time kernel
45s - max time network
50s - platform
android_x64 - resource
android-x64-arm64-20240603-en - resource tags
- submitted
06/06/2024, 12:11
General
- Target sweet_money.apk
- Size 2.1MB
- Sample240606-pczqaadh9s
- SHA256 bcb82bf9a65e981acdf295e16076f5125e47f4740ad8d8e8b1f29773a20f9c3a
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads the contacts stored on the device. 1 TTPs 1 IoCs
- Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
- Reads the content of the call log. 1 TTPs 1 IoCs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
casgrr.adfbsdff.rtdssd1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Reads the content of the call log.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Requests cell location
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Discovery
Location Tracking
1Software Discovery
1Security Software Discovery
1System Information Discovery
3System Network Configuration Discovery
3System Network Connections Discovery
2Replay Monitor
Loading Replay Monitor...
Downloads
AdjustAttribution
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoPackageQueue
AdjustIoPackageQueue
AdjustIoPackageQueue
AdjustIoPackageQueue
AdjustIoPackageQueue