Analysis

  • max time kernel
    175s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    21-06-2024 10:30

General

  • Target

    3b5558487a749f6b653a717a1061aee1d44a5e1ed501ac2651de1075ed865913.apk

  • Size

    531KB

  • MD5

    3d62760cc1b53064b7cabb6ba5809aa8

  • SHA1

    87f23e331ed8ffcc5e26d43e38cda7723ca67f3c

  • SHA256

    3b5558487a749f6b653a717a1061aee1d44a5e1ed501ac2651de1075ed865913

  • SHA512

    a18f05ef5aa1c2c08c47f18f0040e2f1c9c11395097bfc56fccc4e44c06d94d0e1fffdc4a9de4c175bf59d1115b99a268b18e873598e58aee7d478d8dfd604d4

  • SSDEEP

    12288:J1vJnNQoG6nIA0uqMa9nWUjojagxLo+ghB5KrnjSw:JVJnCoG630rnWFjHoNhBIHSw

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.AUTORUS.JapanDrag
    1⤵
    • Removes its main activity from the application launcher
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Checks memory information
    PID:4654

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.AUTORUS.JapanDrag/files/Config
    Filesize

    415B

    MD5

    3f2590d822b06751a77d616da1d2b5ab

    SHA1

    e5426e325d11b3851ff25936f8d953aa2b94a1a8

    SHA256

    df9bf5d54a727935bbe66548eba65bf2ff072cd77baf114f41e18ec299114f41

    SHA512

    44f10c45cd895f7e89c70f9fdbd623e65b07197da288a7248c6e3d7aeb6b6372167b45dc2ff25f07b752eb9fc9cb0e2dc1e38b6ce9cd527551a49507cf7a57cc

  • /data/user/0/com.AUTORUS.JapanDrag/files/Timer
    Filesize

    368B

    MD5

    7ef32354243dc0a7508f5818986935fb

    SHA1

    a2e933d4daedc392f49a13c87158663505dc4f06

    SHA256

    1a896cc29e594217a1ac1498e9635309bb2dc9e56be80d8c1c4f90deb444501c

    SHA512

    512e1fe3463897ee8854e5fbf4d91d86cf9635817d4f5f7a70767d3f85f23257bf9501dd5a4b404d63c50e734b11b9568500fa77f8c58b0840a617c87c331f55

  • /data/user/0/com.AUTORUS.JapanDrag/files/Timer
    Filesize

    368B

    MD5

    846b1b808b0ddb882e4cec1e50c92800

    SHA1

    dc778125a16a95d19528b11b82cccb03a99a9af4

    SHA256

    73ad2f257602237ee2714bce9cf5c8b142b76b56dd9e0b5d79151c412d80f080

    SHA512

    f88075cb55f39945d3ee20b87ae05b08bf4428d8f9221d65ef33dd3ac58d76c9363cc0900712dec37f081f440b356501660520c3756c86480c94f46d672e589e