e0223551cf0acb5bb8bc1850e7b2d15505000797d2f7ba667afc774fec3741e0

Resubmissions

11/07/2024, 13:45

240711-q2g27syemp 6

11/07/2024, 11:29

240711-nlnhyaxakh 6

20/06/2024, 18:10

240620-wsgmza1aqf 7

Analysis

max time kernel
63s
max time network
150s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
20/06/2024, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

indus.apk
Size

6.7MB
MD5

05d2ed5f627863ae29b15a7f1a4a6d5b
SHA1

a90656424460afacbb4c39c76480072c08a78f00
SHA256

e0223551cf0acb5bb8bc1850e7b2d15505000797d2f7ba667afc774fec3741e0
SHA512

ec464753fbba5c70f4e078f8bffd28cdd20a6aa1e3747e76391400171ba5c74dea3f5938afd4c7429a69d14d3d9bb55c0c3252bc7e174571655813939f4c53b2
SSDEEP

98304:zeL6v5Emzqor6CgG/3ZKXG+jzva7hIWQBzSpu+0VrV+1ewRlw9oQIa88ZKo/Krjp:pv5EmmhZGBSjra7t6zSAVmPVC1gP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.android.www.view

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.www.view

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.android.www.view

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.android.www.view

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.android.www.view

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.www.view

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.www.view

com.android.www.view
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5050

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.android.www.view/files/PersistedInstallation1932794369226473412tmp

Filesize
567B

MD5
5ff6ea40e63c3ba51fd4d28c1d091e4d

SHA1
eca2f233b7e401dd3349709e77d761e4fc8cd94e

SHA256
b8d12ea49c4571630f65af8724f6a4fdf4be938f8d0932bfff8358ae5e7ca3cf

SHA512
7392ebb51084c52d43979ea9ef2db2234699ffd7c8109d7f419cb55b62f5195409102106f20cceb098891f650c3601e7483b85674df34114cd073a8456f5f2a3

Download Submit
/data/data/com.android.www.view/files/PersistedInstallation6560443556694731110tmp

Filesize
90B

MD5
74ff6e38a86358653930b81ce51edecd

SHA1
4d2e6ca3dc9c0184ecfeaade1a7c461a3f0b4f93

SHA256
46e04dbb4940034edc461281f2b538d6584515ecc856eda2cd173f29aefd79cf

SHA512
a5c3f22936f24df6d3e46e1da7f710b53cfcdadb1d4e833ed6f6dc34055ae5918c8edf8dda55afcccd10e601a17a6b787a744559bc95d82ef515a83e552565bd

Download Submit
/data/data/com.android.www.view/files/profileInstalled

Filesize
24B

MD5
c6d15049233e650e4eac61cb9edf0ef2

SHA1
d131f2c08e207a85136fab7dab07d339fc0e333a

SHA256
955631cc8066f38ce59083c8b908a271e2098b38ce5dcc6ba53654a57a3137ec

SHA512
db70cd72fbc717b13551e5babf01954268f9dbfa88e8e4106353643f6a67a480a0341f495337778fcd98547bf5cfed13a8a613bc42ace5ea2f3e02840df54874

Download Submit
/data/data/com.android.www.view/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
bdea306bce10fc1732bca410b120d833

SHA1
a2d0ef2c85eb1bfb7a6f8913717934982a47aff4

SHA256
71cb15fc86904129225719bdee08d279adc5bce41a956b4d24f80515504c2073

SHA512
dd9bbcb7deb78137a90ac19042ff93e330fa0dfc6e121331a0f97b0720d560728307b63a54807b1b6150b12bfd4a2f89a9931ccc0104bfbabd75f5fd1d9ccc48

Download Submit
/data/misc/profiles/cur/0/com.android.www.view/primary.prof

Filesize
7KB

MD5
9eb07b4059669625dd5dd9b699cd7f7f

SHA1
d356eee87a31de45ceb1cb2c95a77d6e0520cda4

SHA256
26dc631821607e41c020016bca55f117edeaa8e9c6d658c71e5fb145b1ecfe80

SHA512
b4f3fd75547fee6c710841d2bd101a124e6de1c65ae0a162783f511af17e5797bdb790a66fa83a1e269cd737cea81686b85b4dad16c65f3653f27187c6a702fb

Download Submit
/data/misc/profiles/cur/0/com.android.www.view/primary.prof

Filesize
2KB

MD5
8ee38f9ccbcb1272943072c95822ce84

SHA1
b23d89bd08d4a4d546aa47e6083fddeab14c9218

SHA256
3271d13ee3b61dfa5322034d539346b93c23ff8ac6ee491d110bf7b9cd8239d4

SHA512
1453f602f076e8770f794c146fe962ff6794dbbfcaee548bf63904282d88a42d312cb186b26b230ef2ee1fb93523076e1a464f02d83426b9b2435e76b5c9b4bf

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads