Analysis
- max time kernel
178s - max time network
186s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
12/06/2024, 23:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x64-20240611.1-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target 513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4.apk
- Size 79KB
- Sample240612-288dhsvcje
- SHA256 513b750d51aba18122fbc1d0569eb5e26cf38a16649818a10fe8e7e1d67973a4
- MD5 d74df8aa41896f6ad81f5f8cd10c3190
- SHA1 8e2078ed4b8c72da6113e24e4ea2cc6ba128ea9b
- SHA512 733c8216dc091b1a1882e301c37542ce8be849af6177f2e3132e382e224c16bf625a8bdf093700b0e235a13a33973983344d284d406c9e43cb83e7edb0647b56
- SSDEEP 1536:schvgivSZNusrXfB33Kw1FcKcrRrVLkLLa7TVTwQaCFBJD9RDj/eVAg:bIiaZvvcwrkrRrVMm/pwQ5F7niyg
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener eruyy.yrry - Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones eruyy.yrry - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal eruyy.yrry - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo eruyy.yrry