Analysis
- max time kernel
176s - max time network
183s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
12/06/2024, 23:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x64-20240611.1-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target 513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
- Size 79KB
- Sample240612-288dhsvcje
- SHA256 513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4
- MD5 d74df8aa41896f6ad81f5f8cd10c3190
- SHA1 8e2078ed4b8c72da6113e24e4ea2cc6ba128ea9b
- SHA512 733c8216dc091b1a1882e301c37542ce8be849af6177f2e3132e382e224c16bf625a8bdf093700b0e235a13a33973983344d284d406c9e43cb83e7edb0647b56
- SSDEEP 1536:schvgivSZNusrXfB33Kw1FcKcrRrVLkLLa7TVTwQaCFBJD9RDj/eVAg:bIiaZvvcwrkrRrVMm/pwQ5F7niyg
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener eruyy.yrry - Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones eruyy.yrry - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone eruyy.yrry - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver eruyy.yrry - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal eruyy.yrry - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo eruyy.yrry
Processes
-
eruyy.yrry1⤵
- Obtains sensitive information copied to the device clipboard
- Reads the contacts stored on the device.
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5111