Analysis

  • max time kernel
    25s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    14-06-2024 22:36

General

  • Target

    4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b.apk

  • Size

    4.2MB

  • MD5

    ab39084391bd609f828ce0d7ce8190d8

  • SHA1

    dade8873caf6e2375cd29a6509feca2f9b52ca60

  • SHA256

    4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b

  • SHA512

    2cfd2134397b8bc580db80cbc4b8b62aeb46954b014fe15bbd16ba39ee2009f532d235cf30d302f35803b6b361925cc8a7cd0a41a71fa59da24a601d9833a212

  • SSDEEP

    98304:ovQXFcsmuUOlejypRFOyPkey90ylWChHuPke4Ipo/KrvAl:oomsVUCXkeByNuPkZ

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.insta.sbisms2
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks CPU information
    • Checks memory information
    PID:4666

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.insta.sbisms2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    42cda95d7a23257c16c36c26609a169a

    SHA1

    a062419dba2097a3ebccadab3d01765c5677efd6

    SHA256

    d54e9a799bb4a623441f134e4ce4edd279639d3462c76fec12b4786307da4715

    SHA512

    1ed4bca3fc146a8a5ed9b4ecc29606b81db3fd47a5f4cfccc59276089d6747e2827f7736c68735d0aabfc0488cf76e99a21fa874735098ecf6e6d16791fbcc47

  • /data/misc/profiles/cur/0/com.insta.sbisms2/primary.prof
    Filesize

    1KB

    MD5

    df932af2bdcc14de18f553739228602d

    SHA1

    5c56b6e028ad7927e61b8f61cd1be7106a72fbfe

    SHA256

    2de6d71fb21f8fbfbb4acb5fa2a6dc5773a874a7d0ca2e1fb11694df00a639c4

    SHA512

    5d468d82a180d0a12af1c5d711201559cc1969ed4486885b5c0448c1f8cdc43b43e44324f70e95dd1aafa87d1af8c56c20b45d8378fc9af8718282919f1831f2