Analysis
- max time kernel
49s - max time network
150s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
15/06/2024, 22:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f61a0c1ea38ff0e1f6163226426fb23cb149508b3c75967c53e49de8168ebbcd.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
f61a0c1ea38ff0e1f6163226426fb23cb149508b3c75967c53e49de8168ebbcd.apk
Resource
android-x64-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
f61a0c1ea38ff0e1f6163226426fb23cb149508b3c75967c53e49de8168ebbcd.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target f61a0c1ea38ff0e1f6163226426fb23cb149508b3c75967c53e49de8168ebbcd.apk
- Size 3.6MB
- Sample240615-2vtcfaxhpc
- SHA256 f61a0c1ea38ff0e1f6163226426fb23cb149508b3c75967c53e49de8168ebbcd
- MD5 6ef308525d30fcb1cbec884d1e932ca0
- SHA1 316890e02c148f22d3149426145aa00c0879b7a0
- SHA512 05327f5314eb99860b89a2ace9a3aa291c772d58f95ddc175ecb77184349e6dc75315a4ef687cd01569c4295a394abf89be43a2bdaddf74684cbb2ca3d66009d
- SSDEEP 49152:OrDtb7cdfGw8oBY8N/kUWyUTQ7QXJ3JAgdtBCAUgojNforXJgImhOrMoi:OZYf78OYWKJ5Ykpoj6rIhOrM5
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener kyc.pk.bandhanbanknewpannel - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone kyc.pk.bandhanbanknewpannel - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver kyc.pk.bandhanbanknewpannel - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo kyc.pk.bandhanbanknewpannel - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo kyc.pk.bandhanbanknewpannel
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/kyc.pk.bandhanbanknewpannel/files/profileInstalled
- Size 24B
- SHA256 7bb34105fa226864df03a0b4043f3626d614aa22765eb10697b489353886a168
- MD5 26c1160bd0c3c417ead07c31f36e660f
- SHA1 0e4820c4f0a2f953ef3171c0b787c43a1e0dde4a
- SHA512 954ec1cd3c798a9a857fc12d9027512ec9ba36485d44496c25b1fc718fbeef8a2c09c0b9dba88d5fb15a6b286b5f84808ab87dc5bf848afe4cbe0849ee2afac2
- MD5 SHA1 SHA512
- Path /data/data/kyc.pk.bandhanbanknewpannel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 572dc2cf645488494b613ae033846fe48019f4845b5cc1078db280a8835f084d
- MD5 c35933e337f1258ef697af0e485b6495
- SHA1 fdf23479dcbe23d5ffea124b2a027855b8c3eda1
- SHA512 a7ed10339506b94adf690f159821741cc4c979774c7052254635ac6404b5cd184a4a08e3e69edb3455c0345a906dea6d97faf35a35241b67c610625f7402f659
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/kyc.pk.bandhanbanknewpannel/primary.prof
- Size 1KB
- SHA256 75e0202870805130547ab0d7e8e895db1306e292b4e87136f61ec25f7e906148
- MD5 9cd98a378eb8465c8427a2a3a96c9d57
- SHA1 27b2d79f7e4b1319b41276927c511124d0fbe547
- SHA512 20364dc7883dafb8d2925f7e5d4cf29e19de13b80eca26b576500cd2646fc11f3aa251cd95f954d8bab35020f6a1d376497ae88d6fbe97a0890b12b5012e0dbe
- MD5 SHA1 SHA512