Analysis

  • max time kernel
    175s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240611.1-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
  • submitted
    21-06-2024 10:30

General

  • Target

    3b5558487a749f6b653a717a1061aee1d44a5e1ed501ac2651de1075ed865913.apk

  • Size

    531KB

  • MD5

    3d62760cc1b53064b7cabb6ba5809aa8

  • SHA1

    87f23e331ed8ffcc5e26d43e38cda7723ca67f3c

  • SHA256

    3b5558487a749f6b653a717a1061aee1d44a5e1ed501ac2651de1075ed865913

  • SHA512

    a18f05ef5aa1c2c08c47f18f0040e2f1c9c11395097bfc56fccc4e44c06d94d0e1fffdc4a9de4c175bf59d1115b99a268b18e873598e58aee7d478d8dfd604d4

  • SSDEEP

    12288:J1vJnNQoG6nIA0uqMa9nWUjojagxLo+ghB5KrnjSw:JVJnCoG630rnWFjHoNhBIHSw

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.AUTORUS.JapanDrag
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Checks memory information
    PID:4270

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.AUTORUS.JapanDrag/files/Config
    Filesize

    415B

    MD5

    59c71e7d532bae6d5056d870aa7ce97b

    SHA1

    6f291bcc7fdbe709913d0ba50e38ddf5457c9cd7

    SHA256

    efe66ea8ccd08cf645e2df9be97450bbef97804dd3b9a1c65b6470de86bacb63

    SHA512

    6baf7fdad8b16382aa3ef67ae93258dcc3c09b866af31c94f62a5a47de1372d7d79e6a8684f7788a362a701939aba1fa78bddf36d050594f41ee7355d9bb7a9c

  • /data/user/0/com.AUTORUS.JapanDrag/files/Timer
    Filesize

    368B

    MD5

    fb53ceca0ccc8709c94f671fc4ec961b

    SHA1

    9fea81eebc52195b068d113420d34d8dfbae3993

    SHA256

    4043813dd19cf1d7fe6d5b141963a2aed8218f980a233a8725efbe326f489c50

    SHA512

    fa73154227f47f6cd8bc7a686759ff6f9626e0feb40e40e737ab1869bdb535f1cb3602f402f71a5e75558eb4a14c46aee100d35249a7360871e390cb4645da55

  • /data/user/0/com.AUTORUS.JapanDrag/files/Timer
    Filesize

    368B

    MD5

    09487e8605c9cce2ea0fca0d584b7806

    SHA1

    e2253e74f2a07da3fcf8b624e121d09a9733a145

    SHA256

    c78b001183fc21556c468874443564d7737288073c43a9bf21b0e2c8424b3fb5

    SHA512

    459dbc3139694b6caed57273f0260f5ef20ced8bbaf50ba260c55c5cdb9c9daa2ef813d580f2b254987e2a30191d38cf377037657330ea241ab51db29d76c88b