Analysis
-
max time kernel
26s -
max time network
131s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
14-06-2024 23:13
Static task
static1
Behavioral task
behavioral1
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
-
Size
3.1MB
-
MD5
5a93f8bf37e6f4a2b31bf3f49dc9b720
-
SHA1
a1f02973c1fec827634e69a4f6f95db250c10e05
-
SHA256
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b
-
SHA512
1453c30bd02c538463afe1ef40671722af0aca22062a949c04fb82ec1f4db6f1d05ebcb36eac0969d176ed5ca7d4c7def6654269aab166d38dcb45023bfa31c3
-
SSDEEP
49152:p96hcbzErkKDkhaP1ivSi3gYfggI7ESYD1r7wxqCDNr0z8gXVhhrEzN:v6hcszDkhM1owP7ESY17kMhhrQN
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.smsreceiver.dhruv2description ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.smsreceiver.dhruv2 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.smsreceiver.dhruv2description ioc process Framework service call android.app.IActivityManager.registerReceiver com.smsreceiver.dhruv2 -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.smsreceiver.dhruv2/files/profileInstalledFilesize
24B
MD535ac6dede698b57844eb2d8a7deea8fb
SHA1e7edd905b8ae5f5dfc358b31035671b35e432b26
SHA2565ada08f73f77813b2a7ac213c3d6c95833a3037fe0d6570c32cfc039055b3925
SHA512f2f0603dd4b5c4eab1c4d93688e8dd948b3d84596698225f8c1ffadbc071913f2289e0bc52e09d6c40ffde6356cd7e33fbbbb29915b3d55d1c084d55e6bc379c
-
/data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD55f84e12a6f7fbee055b558113e9bb61c
SHA15245bf9f069a9ce0e86b9d76851677b910e93575
SHA2564c1c8491c3d8d2f83e5461b37ee0172f2b0ef8c8de860a8f480b1f8a25ca70ac
SHA51244439468c910708bb10950c9207bcbe473d92a447cd1280e98e92ae58a99e2c3529b39a732a45ee38774e3d6073e9b0e5b501f479b9dca4c78d0faa620a25049
-
/data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.profFilesize
1KB
MD529a7471c6771af7439691a9426549124
SHA1d1ecd035fbc00b3ea34b528f0982d16823ace6ef
SHA2562a711f9452d9be592bf353efaee9436bce28aefbca532633f4217574923559a0
SHA512e6a30a49529cc7a496645a89b3ead5dd1cbfb500b95646abbf497e8844b7cfc82282607deba5d3f481d95ed3a116b74cebed62ec66f53a611028c4837ae12c5e