Analysis

  • max time kernel
    50s
  • max time network
    138s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    12-06-2024 14:18

General

  • Target

    07c1c3bb5b637a8b90dc011c58d618f141de07fecefcb770ac28876e8c53bfc6.apk

  • Size

    2.0MB

  • MD5

    7ff873b920e71a233ffbf2f74c9a9c67

  • SHA1

    b493af4e31c859d74a3b1853f25a7b1ddf672ce6

  • SHA256

    07c1c3bb5b637a8b90dc011c58d618f141de07fecefcb770ac28876e8c53bfc6

  • SHA512

    d6d95ba9a65104e38b35f55ed95589a0a6325da6d3663f4ec81b6677f8b39a2bae77eb519c6185e975142a5508736749659575e67e0008e48f8c28b8c401932c

  • SSDEEP

    49152:+7fAy9VNywSh1RPTMrcSkC94gITCoTwr8YBuF1:+7YyFARryDoTwr8yuF1

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.yasharweb.homevisit
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yasharweb.homevisit/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    d6f7c900417395a19d92eebcf1d03ef6

    SHA1

    c008b9e944bfc8b87ff78c73298df6f631145733

    SHA256

    7d83d0819276c7d6e9ab225cf2cf2b91f88ae616ff62cb12803107cad3ea9c01

    SHA512

    45b4858ff162f5cdba01b212d98b7a79a50c99f6f003c19a0ac938d3c905bcb51e973e9324428a3823bb0e899e6cb43164479fbdf896aaf18f3da0a13c4a06ef

  • /data/misc/profiles/cur/0/com.yasharweb.homevisit/primary.prof
    Filesize

    1KB

    MD5

    f9030b1d201b90a2a325b9480b2ed862

    SHA1

    0142cda8ef85e8fcab0551240bf291d632e42bac

    SHA256

    3bad73fa048f5a65742ea44988642f68bd1a1dc6f08757501e988fa445300d91

    SHA512

    a9cdffeb44b047528543527a0e68dffe2e62a40cecc1159fadc4e0b692d5d323d889f6dab31e13764d9ade230b082399fc642ce8f7e6652c9d870307f8eddb72