61862a99fce47c4c353068dae298c579abbe3cdca33b6f0abf02e247e5892f47 | Triage™

Resubmissions

16/06/2024, 06:58

240616-hrv73sterf7

16/06/2024, 06:42

240616-hgvtkatbne7

Analysis

max time kernel
121s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
16/06/2024, 06:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 6.1MB
Sample240616-hrv73sterf
SHA256 61862a99fce47c4c353068dae298c579abbe3cdca33b6f0abf02e247e5892f47
MD5 e309a572484b22ecc2f250136ff10326
SHA1 7ad98727445af5c6cf1f2e622f92f4e8a7573c5b
SHA512 f0aa924ac318462ec7d9acddf5364675e4ba73aed5c0bf9026960f8438bdc7c422a98e55a4624ff17a195861f69434fc542a97565965460c5f8ec9d588269cde
SSDEEP 98304:WLJtUa8awbyqrSQwWD48RAdShWHh6QksywyLz2+X+bJvsGxlG/owY4R2:QRwO/rWD4ndShChdEHutt9b
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.Store.yahoo

Checks the presence of a debugger
evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.Store.yahoo

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.Store.yahoo

com.Store.yahoo
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4655

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads