Analysis
-
max time kernel
130s -
max time network
152s -
platform
android_x64 -
resource
android-x64-20240603-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system -
submitted
07-06-2024 19:14
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_980396e6ec32c0d6f25aa86ffba1befd.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
VirusShare_980396e6ec32c0d6f25aa86ffba1befd.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral3
Sample
VirusShare_980396e6ec32c0d6f25aa86ffba1befd.apk
Resource
android-x64-arm64-20240603-en
General
-
Target
VirusShare_980396e6ec32c0d6f25aa86ffba1befd.apk
-
Size
308KB
-
MD5
980396e6ec32c0d6f25aa86ffba1befd
-
SHA1
fb9bdfbfce8ca2bc9b33c16c2bf6654de2d8e610
-
SHA256
092693c440fc07042c17e0fb52ac06ab866dcfb8be894b48446b0b7aaf2b5807
-
SHA512
f053076936eeab7670b08e1e72105b6a16a893800be7a3d1901ec68ffaeb9c93c8221e469e63faa273329ed7cc530017d0697bbfe5eb8a6d6f8f3d45d0755231
-
SSDEEP
6144:6xq/9kwsfxt+0mR2jtsRrflt6kLn71443NyR+oT5cT2+bpmH0z:z/9wH+0mQjt8fnK49yRFT5uxbpmUz
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.androiddescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.android -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.androiddescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.android -
Checks memory information 2 TTPs 1 IoCs