Analysis
-
max time kernel
25s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
14-06-2024 22:36
Static task
static1
Behavioral task
behavioral1
Sample
4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b.apk
-
Size
4.2MB
-
MD5
ab39084391bd609f828ce0d7ce8190d8
-
SHA1
dade8873caf6e2375cd29a6509feca2f9b52ca60
-
SHA256
4c1ec1816a1f85d5547bc9b5076367aa056a85fac35bc4d76198589054a1841b
-
SHA512
2cfd2134397b8bc580db80cbc4b8b62aeb46954b014fe15bbd16ba39ee2009f532d235cf30d302f35803b6b361925cc8a7cd0a41a71fa59da24a601d9833a212
-
SSDEEP
98304:ovQXFcsmuUOlejypRFOyPkey90ylWChHuPke4Ipo/KrvAl:oomsVUCXkeByNuPkZ
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.insta.sbisms2/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD542cda95d7a23257c16c36c26609a169a
SHA1a062419dba2097a3ebccadab3d01765c5677efd6
SHA256d54e9a799bb4a623441f134e4ce4edd279639d3462c76fec12b4786307da4715
SHA5121ed4bca3fc146a8a5ed9b4ecc29606b81db3fd47a5f4cfccc59276089d6747e2827f7736c68735d0aabfc0488cf76e99a21fa874735098ecf6e6d16791fbcc47
-
/data/misc/profiles/cur/0/com.insta.sbisms2/primary.profFilesize
1KB
MD5df932af2bdcc14de18f553739228602d
SHA15c56b6e028ad7927e61b8f61cd1be7106a72fbfe
SHA2562de6d71fb21f8fbfbb4acb5fa2a6dc5773a874a7d0ca2e1fb11694df00a639c4
SHA5125d468d82a180d0a12af1c5d711201559cc1969ed4486885b5c0448c1f8cdc43b43e44324f70e95dd1aafa87d1af8c56c20b45d8378fc9af8718282919f1831f2