Analysis
- max time kernel
26s - max time network
151s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
12/06/2024, 17:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
071eaf49198b671df78c82fabe24851adfeb4b3f9e0d1f384bfd07663dd4113f.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
071eaf49198b671df78c82fabe24851adfeb4b3f9e0d1f384bfd07663dd4113f.apk
Resource
android-x64-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
071eaf49198b671df78c82fabe24851adfeb4b3f9e0d1f384bfd07663dd4113f.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target 071eaf49198b671df78c82fabe24851adfeb4b3f9e0d1f384bfd07663dd4113f.apk
- Size 3.1MB
- Sample240612-vmcw6asdra
- SHA256 071eaf49198b671df78c82fabe24851adfeb4b3f9e0d1f384bfd07663dd4113f
- MD5 a0ad8a1c881519d4c6c213f0705da1db
- SHA1 28fadf474c8e99a9ba6d205f041bcc05fcc8f8d2
- SHA512 7672124b10d13c9f1867f6d7b6120a16d00dd6de95a134e44e54ccd46669a896cd9c0e1ca9d06839d0a1b30572841c1cf4540c411c65fb9418435c89b004c60e
- SSDEEP 49152:bgyP9iAwRq3ok0Zq6nGgfiwqzqEnrReB1Hzkn4k3jfgKnHpJgI3lhOrNH/I:bgeuRq3j6nGOitrn1Efk3MKnvlhOrNHA
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener yes.debug.yesbnak - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone yes.debug.yesbnak - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver yes.debug.yesbnak - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo yes.debug.yesbnak - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo yes.debug.yesbnak
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/yes.debug.yesbnak/files/profileInstalled
- Size 24B
- SHA256 3ad2d65184d20dbd253a5ff871bcd0ea98ec9f67d850161a7b90c08aedc059e7
- MD5 140c56d9159e99e1ce7681685ded2ab4
- SHA1 82c032962301a55b05feb1992b4b6ceb946565b9
- SHA512 01be1d559e0e23eaa6bafd51c972169ef68d865b860d43909c5a60fc01d3fe231f815dc5624b52d6593041d79aef178c8b1b140acb8105459e1c7983f2f636e0
- MD5 SHA1 SHA512
- Path /data/data/yes.debug.yesbnak/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b6cc7f95fd873e6797036bd16e020404b8da205ac27663192235fd1b9b78f107
- MD5 68cef98a81b3d56713210e2b41b36e74
- SHA1 cde241715804a40067a3b58ae6198f85d82e4421
- SHA512 24b1a6f70046a8b50c9db2ee88a4e72a3938d7940ad4e2988aa7598d7b9cabc5af3923cc19f4e01e2a36965b11f8f1e741b2472e206f37936a5461aaf458f006
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/yes.debug.yesbnak/primary.prof
- Size 1KB
- SHA256 703a20a4e8af234859019c7dd9f879ac5b25f28d0e729afe1a09b03d9de9a50f
- MD5 2fd51c2351b0f2eaa881142f88221c56
- SHA1 ff7970a3b6d375f4792c7f281e83f6ba750fa2b6
- SHA512 a7dc50d4e5c175b150f88d8af6221fc565ec41d230f4a66f34fc5ab82f38a45a545e9332e75187702e10720d3b2e69269f008ea14e178a03eb1ae43883c3e0d0
- MD5 SHA1 SHA512