Analysis

  • max time kernel
    26s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14-06-2024 23:13

General

  • Target

    9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk

  • Size

    3.1MB

  • MD5

    5a93f8bf37e6f4a2b31bf3f49dc9b720

  • SHA1

    a1f02973c1fec827634e69a4f6f95db250c10e05

  • SHA256

    9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b

  • SHA512

    1453c30bd02c538463afe1ef40671722af0aca22062a949c04fb82ec1f4db6f1d05ebcb36eac0969d176ed5ca7d4c7def6654269aab166d38dcb45023bfa31c3

  • SSDEEP

    49152:p96hcbzErkKDkhaP1ivSi3gYfggI7ESYD1r7wxqCDNr0z8gXVhhrEzN:v6hcszDkhM1owP7ESY17kMhhrQN

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.smsreceiver.dhruv2
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.smsreceiver.dhruv2/files/profileInstalled
    Filesize

    24B

    MD5

    35ac6dede698b57844eb2d8a7deea8fb

    SHA1

    e7edd905b8ae5f5dfc358b31035671b35e432b26

    SHA256

    5ada08f73f77813b2a7ac213c3d6c95833a3037fe0d6570c32cfc039055b3925

    SHA512

    f2f0603dd4b5c4eab1c4d93688e8dd948b3d84596698225f8c1ffadbc071913f2289e0bc52e09d6c40ffde6356cd7e33fbbbb29915b3d55d1c084d55e6bc379c

  • /data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    5f84e12a6f7fbee055b558113e9bb61c

    SHA1

    5245bf9f069a9ce0e86b9d76851677b910e93575

    SHA256

    4c1c8491c3d8d2f83e5461b37ee0172f2b0ef8c8de860a8f480b1f8a25ca70ac

    SHA512

    44439468c910708bb10950c9207bcbe473d92a447cd1280e98e92ae58a99e2c3529b39a732a45ee38774e3d6073e9b0e5b501f479b9dca4c78d0faa620a25049

  • /data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.prof
    Filesize

    1KB

    MD5

    29a7471c6771af7439691a9426549124

    SHA1

    d1ecd035fbc00b3ea34b528f0982d16823ace6ef

    SHA256

    2a711f9452d9be592bf353efaee9436bce28aefbca532633f4217574923559a0

    SHA512

    e6a30a49529cc7a496645a89b3ead5dd1cbfb500b95646abbf497e8844b7cfc82282607deba5d3f481d95ed3a116b74cebed62ec66f53a611028c4837ae12c5e