Analysis
-
max time kernel
56s -
max time network
69s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
12-06-2024 07:35
Static task
static1
Behavioral task
behavioral1
Sample
AdityaBirla.apk
Resource
android-x64-20240611.1-en
General
-
Target
AdityaBirla.apk
-
Size
6.4MB
-
MD5
75b7f518f89a9cdb706237f93d10cdfc
-
SHA1
78b4d2f9ac5112912675aeb43180dd435cc17656
-
SHA256
1b689fa32d60952a10e2a04fd21f4950ea155adeccad234ab580cfacf824f062
-
SHA512
f5db70579776f006fe6aa067e06e12dc26b15d7dc79bc7bf4d8105ef26bfc1f89cf874bd20560d9b60208878b5bc3827aa51dc4898d9143c6a3db805a2afa45a
-
SSDEEP
196608:ito/8gzT1Y4YWZ9jDfyEB8NPqE8bgbWQ/ZNQW21:itm8gzTqWZ5DKEGMbY5/ZNQF
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about active data network 1 TTPs 1 IoCs
Processes:
com.ecshop.shop.ppsjdrbdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ecshop.shop.ppsjdrb -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.ecshop.shop.ppsjdrbdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ecshop.shop.ppsjdrb -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.ecshop.shop.ppsjdrbdescription ioc process Framework API call android.hardware.SensorManager.registerListener com.ecshop.shop.ppsjdrb -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.ecshop.shop.ppsjdrbdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.ecshop.shop.ppsjdrb -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.ecshop.shop.ppsjdrb1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/storage/emulated/0/Android/data/com.ecshop.shop.ppsjdrb/cache/journal.tmpFilesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6