Analysis
-
max time kernel
48s -
max time network
145s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
-
submitted
12-06-2024 13:31
General
-
Target
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13.apk
-
Size
3.1MB
-
MD5
fd5c5b123eacbd5a0c56a2d5f7104b72
-
SHA1
2af5899addcadb218a6934f4bee7dedda2457614
-
SHA256
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13
-
SHA512
4a82fd06b092decf49b0e244a7d3195413aad29c85733fcbb0466fa34e150b6c6dd8fac54586ae72c9eb1c94a420153c348ce141cd086a07d94e36949e266a1e
-
SSDEEP
49152:IApp8WW9EDE1CVBgd27fC06+umfjPyrFzkn4kZjfgKnHpJgI3lhOrNH/4S:IOp8N9EDEcsrf+tfjEfkZMKnvlhOrNHv
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
yes.debug.yesbnak1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/yes.debug.yesbnak/files/profileInstalledFilesize
24B
MD51a57b1969c500fed1f52345320a81dc6
SHA1d4428783b1d95ead78c493d5aa04019dead30478
SHA25681dbe12ddf3013614a5868f40e1a3ef2a3483cfe853e44cd54507c312f14764e
SHA512ee5b8da50265bb36f5ac205a7ec18a5e064a7e6f174315d68e90f227bac0256f63730db9163d0f13264918128085cbaef71f882be821531b2c044581f3aa702d
-
/data/data/yes.debug.yesbnak/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD5c1296884151e8990266a4666ca035e88
SHA12dfaa1cce9a92de3452363a2523b39cd7c772003
SHA25611357057e708838383e1b89e2c0c534cccdbf96388b07a524abef03f594e7e14
SHA5128f61a36febfca2521324628d6ee6155c3fce9d59e7f9a28f655a3195cfe439a6579e0bdac2d3c66d18c7411748beaad74b7c31709786f358151035f83f2dc1eb
-
/data/misc/profiles/cur/0/yes.debug.yesbnak/primary.profFilesize
1KB
MD5fc68691110701a09ae3316b71e9aba4b
SHA182ef2be098b162e898f77b28e70eb35dc61aa07e
SHA2565fbfc3aca9fb54f9bc698a75b023196055d7d0d6c1454aa517b2360bb58a1043
SHA51212b947635178386ad8c8ffae0b16a3af7b9be6f5645c8f07275083c1c4398fd0e37990012c51f01be07caf8341889bc4b3f988d2e0da6866ae1788698581b10f