Analysis

  • max time kernel
    106s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    12-06-2024 14:43

General

  • Target

    0ebf9b2f17c7ae98fc0c22d7e1b365d95196df5f35ce4edc621f4c1ead439a17.apk

  • Size

    4.7MB

  • MD5

    29429266da337f286b24189809ece97d

  • SHA1

    c7f52c0c5798c9197a63791ecf42b89ac2f5964f

  • SHA256

    0ebf9b2f17c7ae98fc0c22d7e1b365d95196df5f35ce4edc621f4c1ead439a17

  • SHA512

    973f304c4974da969c0f152c046cff77d98ec430162c233316a07b401e9111dec0915dce07ab54e3921f08512280c1272d716a148712cfdb1d4d963359334f1b

  • SSDEEP

    98304:Gi8vhHr6SKxf1yDICJV9pINkLOamwGfpLtBO0g5907SHDKN4H4NRw2+i:riHr6z1yDICJmkFmxtBO907Xw2+i

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • xnxx.nt
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks CPU information
    • Checks memory information
    PID:4464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/xnxx.nt/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/xnxx.nt/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    de9fad9321a30c0da7807c2c10227d53

    SHA1

    efa5661dd748f414d015cbbf382cc05adbecca39

    SHA256

    4af224b2b66e9cbdd12dfa50af3cfc063e909f18a8ff2b8dba7e35415d47b721

    SHA512

    f8506cedc82d3268d25e5c04ba4097b570a96aa5e0d6b029f0e6efea78f16f024f5269c1c7f1ce8c76f6e2a00eae805096c85fe4ddb31c87064ed7bba5e21959

  • /data/data/xnxx.nt/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/xnxx.nt/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    2975a315f12da8fb2f488832f027f300

    SHA1

    ed9257209a0d11d563adb9d33372106ab165359a

    SHA256

    0efbd5b5c8543ebd8d98e2ea9627bc2214780acb91874d61b369d78d8dcc7746

    SHA512

    4f9e18786744d2e49296262481d1c333698b8331b91c06df076dbc9c29482bc715fc3e680bc449179f027843dbf5461912a578ff5c2aec5e5e9b2564f92d75ce

  • /data/data/xnxx.nt/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    1c90d2c244f30ef96a0aa608f9dd7295

    SHA1

    fa1cd987358356abb85eeca3038e40492203e050

    SHA256

    c5e8c6196f5766d541b4575e022885cfc08aae787139c8b69109fd973b7e5ba7

    SHA512

    2bf23a69eec7b9d609f813c4910cb560670291d69cce95e38b9290755bb30f351d0f20b0553ba058cbef48f64ed28a12dc4d3c23066e320aad65f19ed4310bdc