Analysis
- max time kernel
26s - max time network
131s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
14/06/2024, 23:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x64-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target 9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk
- Size 3.1MB
- Sample240614-27fbcazepc
- SHA256 9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b
- MD5 5a93f8bf37e6f4a2b31bf3f49dc9b720
- SHA1 a1f02973c1fec827634e69a4f6f95db250c10e05
- SHA512 1453c30bd02c538463afe1ef40671722af0aca22062a949c04fb82ec1f4db6f1d05ebcb36eac0969d176ed5ca7d4c7def6654269aab166d38dcb45023bfa31c3
- SSDEEP 49152:p96hcbzErkKDkhaP1ivSi3gYfggI7ESYD1r7wxqCDNr0z8gXVhhrEzN:v6hcszDkhM1owP7ESY17kMhhrQN
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.smsreceiver.dhruv2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.smsreceiver.dhruv2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smsreceiver.dhruv2 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.smsreceiver.dhruv2 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.smsreceiver.dhruv2
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.smsreceiver.dhruv2/files/profileInstalled
- Size 24B
- SHA256 5ada08f73f77813b2a7ac213c3d6c95833a3037fe0d6570c32cfc039055b3925
- MD5 35ac6dede698b57844eb2d8a7deea8fb
- SHA1 e7edd905b8ae5f5dfc358b31035671b35e432b26
- SHA512 f2f0603dd4b5c4eab1c4d93688e8dd948b3d84596698225f8c1ffadbc071913f2289e0bc52e09d6c40ffde6356cd7e33fbbbb29915b3d55d1c084d55e6bc379c
- MD5 SHA1 SHA512
- Path /data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4c1c8491c3d8d2f83e5461b37ee0172f2b0ef8c8de860a8f480b1f8a25ca70ac
- MD5 5f84e12a6f7fbee055b558113e9bb61c
- SHA1 5245bf9f069a9ce0e86b9d76851677b910e93575
- SHA512 44439468c910708bb10950c9207bcbe473d92a447cd1280e98e92ae58a99e2c3529b39a732a45ee38774e3d6073e9b0e5b501f479b9dca4c78d0faa620a25049
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.prof
- Size 1KB
- SHA256 2a711f9452d9be592bf353efaee9436bce28aefbca532633f4217574923559a0
- MD5 29a7471c6771af7439691a9426549124
- SHA1 d1ecd035fbc00b3ea34b528f0982d16823ace6ef
- SHA512 e6a30a49529cc7a496645a89b3ead5dd1cbfb500b95646abbf497e8844b7cfc82282607deba5d3f481d95ed3a116b74cebed62ec66f53a611028c4837ae12c5e
- MD5 SHA1 SHA512