608bccf44f236542d708efc9e8d81372bb1a941969f267b315772acd370d2b06

Resubmissions

09/06/2024, 16:35

240609-t3r6cadb55

09/06/2024, 15:45

240609-s7g1hacg637

09/06/2024, 15:29

240609-sxcysscf377

Analysis

max time kernel
119s
max time network
172s
platform
android_x64
resource
android-33-x64-arm64-20240603-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240603-enlocale:en-usos:android-13-x64system
submitted
09/06/2024, 15:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Hamster Cоmbot Bывод.apk
Size 7.4MB
Sample240609-sxcysscf37
SHA256 608bccf44f236542d708efc9e8d81372bb1a941969f267b315772acd370d2b06
MD5 43cd0d0837b2cf2371e93e4340614562
SHA1 db8cd87819a91f311f22a78e1e4099486768099d
SHA512 7e5356ef27b70b99a872b3c5cf8e21358971c0c85c34c7fbab6a8a20a70a5859a34dc8c651e274fd3a13bcb3af6f7adfc2269b108f11bbb25eb4257ac5f9a0f9
SSDEEP 196608:xwzajoJT+62TZF8SoGwsX7LwwYwwxfn8/XezdJsy7BwHxz5:4aKfsf1oRjzqXeJSyK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.application

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.example.application

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.application

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.application

com.example.application
1⤵
- Obtains sensitive information copied to the device clipboard
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.example.application/files/profileInstalled
Size 24B
SHA256 ab44bf3f73682497062f25d0f4d6e79563d31680c06280ec95a8f45a52b7d1cc
MD5 14c7bba7909c882fc73bab481d02d220
SHA1 4751ac93ae38a4a718d3be25c9b0162f55e5aa1a
SHA512 7dbc9a40901cf10133768668dd8487bf823959a532b2d7060de778094919c112c0bedbea32482b9bb10dceea36aa6806e8d58fee845ac2a4418c616b74b2a023
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.application/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 913f7fb68fb2d4b3d2920f74631411670035fdf1b80df179f8431f8430e6dce5
MD5 a0dcbfb8f6965904989a4b8369783e88
SHA1 3035406fe88153dfb24cc091820e1b0fd5d6a1a2
SHA512 aafcdd4f9c7d20a6d0cf781b148a662d5394bf603b99c5722a9e64d5333f7f2e0f4923a56d917533328c7357cb1ab5781e499f114392563ef6475a8804876d49
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.application/primary.prof
Size 5KB
SHA256 4c3f5ad9ca5623b2ab5f655be042f18fb156101295381757fa76d524143a25f5
MD5 86800d48a00de0a211011e9356cd7371
SHA1 aaba899af40fc1aba33cbdf52d4f8e2a0b9dcd71
SHA512 71c6ecf46af762b87f05c5b2253711b641f62c0381623364d98181171566b7c879eec22884af047f1d4563de2a7ca78d7a073d1ab5625bb8c171f4941b26edd7
SSDEEP 96:U81hd4fNIRSAt88ezcshnekiU53xhtMcx/X9GrWvX/+j4ccmZiQQdDTMI8vnc:Zb4KwAeRReNUJVFNG6vv+j4cPZYTMnc
MD5 SHA1 SHA512 SSDEEP

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.application/primary.prof
Size 2KB
SHA256 70a25dc684aa6f80410c543eff7cb76aae57dd7a76419a05a4f95e003690aeee
MD5 42e679fc47033f62126cf2e4262b4029
SHA1 e03a5447b7a0c90b0704f57692b83b78f5c535b1
SHA512 8f050d1785ae93a84510abd790156a9c676429078c423646012eafb9f8aed1c2346a13475d56ac504327e3be60e9320bd668cf0c8fec745073bd892e3bfa890d
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads