Analysis
- max time kernel
48s - max time network
151s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
14/06/2024, 22:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fa901b7aab4cf67890db7befd84a8d336967ff949641f9df056a39bf333cb6c1.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
fa901b7aab4cf67890db7befd84a8d336967ff949641f9df056a39bf333cb6c1.apk
Resource
android-x64-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
fa901b7aab4cf67890db7befd84a8d336967ff949641f9df056a39bf333cb6c1.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target fa901b7aab4cf67890db7befd84a8d336967ff949641f9df056a39bf333cb6c1.apk
- Size 4.2MB
- Sample240614-2cb1fasdkm
- SHA256 fa901b7aab4cf67890db7befd84a8d336967ff949641f9df056a39bf333cb6c1
- MD5 e273193134e20600499328d351dc63be
- SHA1 b008a7639935a717fd3b486a4e4bc86d1cbc219c
- SHA512 9d3cfd1e5980b916de743b5cd08c23eb1a09068457fff2e3ab1d64f9e10ce1f51bb512318854eb259346b74e3cb7536438cb2b08a48f14a9e3564b98f16a5c12
- SSDEEP 98304:fJUJ9EMRUOlejypRFOyPkey90ylWChHuPkC46po/KrvA6:OtRUCXkeByNuPkk
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.insta.sbisms2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.insta.sbisms2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.insta.sbisms2 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.insta.sbisms2 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.insta.sbisms2
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.insta.sbisms2/files/profileInstalled
- Size 24B
- SHA256 35e5d8d44ad0458e7245a3ed8fd6fe131d4e18cad648aea36d7be12c2c6c5764
- MD5 e0b673aa250d96e7c9cdb0f5694eb103
- SHA1 fae725552d98bd5ca40d191884f88247533bb577
- SHA512 38bcb25f6319e3bc2ff298d3823a89a88f7cb58de121c10ca1c340a06894105389b5adc28105ddea0654381f618e4b729e95848defd98b3591f024dc30919253
- MD5 SHA1 SHA512
- Path /data/data/com.insta.sbisms2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 c8f5ac4c2cef208779cc1bf3584af363f29ad9bf6f532e304a26117be8cd7e14
- MD5 94d944c8b86e4e4f59985a0931325de7
- SHA1 64ab9d35e2d4d5b455b7285ec86c046f7aa211a2
- SHA512 6f047fff073e1cbd2ec39ebf93a097ae1d49dc802317c2e7b3737c087c412d95c3a011331f709be16649a06b71fd6a777cd91e4c94562d2eebfed6506227744f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.insta.sbisms2/primary.prof
- Size 1KB
- SHA256 148c7edf0f8a7299804ccbe37fc0ee1dc998158e9d107cc7160bb876bac63db5
- MD5 76edc465fac8d8a9fbb358dcdda5dc18
- SHA1 3b83cce523accee6b55582876551c3a03384d5a3
- SHA512 1c455b9f9db4c85adc4cb0dcfa365df4fd9ed6febf17f5079b71a23d7636ab0afb8d19d08298256543a4159e574a8695929b856af33a29918689428f1b408cdd
- MD5 SHA1 SHA512