e0223551cf0acb5bb8bc1850e7b2d15505000797d2f7ba667afc774fec3741e0

Resubmissions

11-07-2024 13:45

240711-q2g27syemp 6

11-07-2024 11:29

240711-nlnhyaxakh 6

20-06-2024 18:10

240620-wsgmza1aqf 7

Analysis

max time kernel
64s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
20-06-2024 18:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

indus.apk
Size

6.7MB
MD5

05d2ed5f627863ae29b15a7f1a4a6d5b
SHA1

a90656424460afacbb4c39c76480072c08a78f00
SHA256

e0223551cf0acb5bb8bc1850e7b2d15505000797d2f7ba667afc774fec3741e0
SHA512

ec464753fbba5c70f4e078f8bffd28cdd20a6aa1e3747e76391400171ba5c74dea3f5938afd4c7429a69d14d3d9bb55c0c3252bc7e174571655813939f4c53b2
SSDEEP

98304:zeL6v5Emzqor6CgG/3ZKXG+jzva7hIWQBzSpu+0VrV+1ewRlw9oQIa88ZKo/Krjp:pv5EmmhZGBSjra7t6zSAVmPVC1gP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.android.www.view

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.www.view

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.android.www.view

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.www.view

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.www.view

com.android.www.view
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4648

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.android.www.view/files/PersistedInstallation8892009499125555237tmp

Filesize
568B

MD5
5e19748611b96f8bf62e44398e0bd02f

SHA1
3e6d8d5c2e425daed5d5f84effa48b7ea1ef86c4

SHA256
8c30cd4b0450f737f81b5479c34fe718342ef60b0307422eca891a57a891af84

SHA512
f2af6a1fc5f95e919370cade107ac9e05044863e65d9b02b1bb20db2c328cab45930da010825f5b4aaf82d53fc090c2e300f8d01c301e5ce189dfb84e9d739a7

Download Submit
/data/data/com.android.www.view/files/PersistedInstallation9179630606190309382tmp

Filesize
90B

MD5
ded805a8eb1fecda7f6998fc8b78daa5

SHA1
4ca3f8726339f9aeff0bea7f6337978ff2b745d3

SHA256
e47d3e3c681b9c476a1cc0996179aba45f4d43c71dbed0c054c70c8e4075b3d9

SHA512
5733e09400dcbd26cc022db93cf8b2ef3f7170afe71351c16b6386ec7668a57bdb7decd8fd97e3e5c13c34b9a3b239a1d4d122242a22d181ded5d4b9aa249476

Download Submit
/data/data/com.android.www.view/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
37b933d3f0c72b69820344389863587d

SHA1
9c208dee4a224db4f99ded744bc488efd658312c

SHA256
bfb1b87ff84f0aad9c4a353e23fe0b8af58fcde42aa9d5b7268516e552f9595f

SHA512
0c046552f64a8ff03b18623bacf164029ddc06b8b96faf66d78768835ae0328d9281f3882121aeef398e9e6f99e4a2b4491a487d6d0bcb0a531eeecb2b286d66

Download Submit
/data/misc/profiles/cur/0/com.android.www.view/primary.prof

Filesize
2KB

MD5
8ee38f9ccbcb1272943072c95822ce84

SHA1
b23d89bd08d4a4d546aa47e6083fddeab14c9218

SHA256
3271d13ee3b61dfa5322034d539346b93c23ff8ac6ee491d110bf7b9cd8239d4

SHA512
1453f602f076e8770f794c146fe962ff6794dbbfcaee548bf63904282d88a42d312cb186b26b230ef2ee1fb93523076e1a464f02d83426b9b2435e76b5c9b4bf

Download Submit
/data/misc/profiles/cur/0/com.android.www.view/primary.prof

Filesize
7KB

MD5
5a665544107a917ef3aa3ef9dbad04fd

SHA1
24ad70e17cc0904fd5594b2d7b5c7e5e9ce33036

SHA256
8a923bfabc37063b105a0c19a0178c732911f0d3ad3dcaa5fb64897a04b56a8f

SHA512
097ccd79ef850f3abe9000f3ce4ec0e01e0d32c2ce6bd9322f68a88265ce07f0ab12611939e625cbb43cde54e73e3086a21b6fef13590d943fb0f3e18d1ec23c

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads