Analysis

  • max time kernel
    26s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    14-06-2024 23:13

General

  • Target

    9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b.apk

  • Size

    3.1MB

  • MD5

    5a93f8bf37e6f4a2b31bf3f49dc9b720

  • SHA1

    a1f02973c1fec827634e69a4f6f95db250c10e05

  • SHA256

    9446e2a547e3462a67f3a006a999c8c000ab1c007beec3bef8d23470ee9dd93b

  • SHA512

    1453c30bd02c538463afe1ef40671722af0aca22062a949c04fb82ec1f4db6f1d05ebcb36eac0969d176ed5ca7d4c7def6654269aab166d38dcb45023bfa31c3

  • SSDEEP

    49152:p96hcbzErkKDkhaP1ivSi3gYfggI7ESYD1r7wxqCDNr0z8gXVhhrEzN:v6hcszDkhM1owP7ESY17kMhhrQN

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.smsreceiver.dhruv2
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks CPU information
    • Checks memory information
    PID:4566

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    b9320b19387e64642923c540278fc52f

    SHA1

    96ddbf35c8f68705662dce68f1542aed4730f13c

    SHA256

    c2f3ba7f3872a3eeab00710d04c231eb362972c79ca47c406516c1b26c6cf4e4

    SHA512

    784020119084f338935b88aa2bc8394e0fcae29ba3f265c0ce064a945343551e1e5d1e22b80b48ef2ae73571e1df998a733b9c7931f501f31403fd4ef7b907df

  • /data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.prof
    Filesize

    1KB

    MD5

    29a7471c6771af7439691a9426549124

    SHA1

    d1ecd035fbc00b3ea34b528f0982d16823ace6ef

    SHA256

    2a711f9452d9be592bf353efaee9436bce28aefbca532633f4217574923559a0

    SHA512

    e6a30a49529cc7a496645a89b3ead5dd1cbfb500b95646abbf497e8844b7cfc82282607deba5d3f481d95ed3a116b74cebed62ec66f53a611028c4837ae12c5e