Analysis
- max time kernel
27s - max time network
147s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
12/06/2024, 22:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6962ba45c936f382e6e64f7c4e786ac633fb30d1abdce80c900dc87bc654ad6e.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6962ba45c936f382e6e64f7c4e786ac633fb30d1abdce80c900dc87bc654ad6e.apk
Resource
android-x64-20240611.1-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
6962ba45c936f382e6e64f7c4e786ac633fb30d1abdce80c900dc87bc654ad6e.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target 6962ba45c936f382e6e64f7c4e786ac633fb30d1abdce80c900dc87bc654ad6e.apk
- Size 36KB
- Sample240612-17nr2ssflb
- SHA256 6962ba45c936f382e6e64f7c4e786ac633fb30d1abdce80c900dc87bc654ad6e
- MD5 b14984c6376471d8cf47ea312e7f6be8
- SHA1 e092710c6abe032bf7fa9797d0f87a686bcd99bd
- SHA512 f7a3d2715a1125d5d5e7af2117dfafe4a582e7e0abc2b194a3555c1d7b483a146f2828f1e56cb7c6570f64c25b405191fe41e3ddc9e6acfa0f0e4327fb453b23
- SSDEEP 384:sLirxkarxo8lh+CFkdVtvCng8XDMMTakcPwSRSV5mbSjlTzzFKVZO+61MyOajz8k:6iNLFy/63Z2YSw115d+8Gajf
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener eruyy.yrry - Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones eruyy.yrry - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone eruyy.yrry - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver eruyy.yrry - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo eruyy.yrry - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo eruyy.yrry