2298d0d62ef35886c5520c8978b5713113eff3581c9f56c509de0e7d795c4b5d

Analysis

max time kernel
25s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
22/06/2024, 23:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2298d0d62ef35886c5520c8978b5713113eff3581c9f56c509de0e7d795c4b5d.apk
Size 2.0MB
Sample240622-3wwpmavblq
SHA256 2298d0d62ef35886c5520c8978b5713113eff3581c9f56c509de0e7d795c4b5d
MD5 b0a34537acadf4103f3cf8c5db030dcb
SHA1 dd4dd14c4297e69bb1a3ead6531203fcd95d2363
SHA512 2f8a589e00e84ee0fa3a1e13f5d24b40bfdfa3a81b60a64cdb745ea66e154982d8089a511cd34d84f1b707427f80a852e0cf648550e0654ffc80c327751acbe3
SSDEEP 49152:bzOKdoJtKQeXhWYvfEboddW0j8AoQg5MgSUNkVT:XO+oDKDhWY3Eqw7X5RWVT
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.aashain.shop

Checks the presence of a debugger
evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.aashain.shop

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.aashain.shop

com.aashain.shop
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4500

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.aashain.shop/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 38efa4caccd15181bae0a242d5a549c4379ead424bde500d1621307f211dbf53
MD5 112088a78f9b43bb83b96ae146d67daa
SHA1 425015a667731c36f8a461b60c6c90502bb0aa74
SHA512 9f5efc8dd832011227d143a03f9ba53d76f93592a4e64c2e3d71af0c6bfebcb4213313ad4cf1effe44e80e1eabdb65d8dd00adf3a0d0860db34365e2a2b3d76d
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.aashain.shop/primary.prof
Size 1KB
SHA256 30ffaed09f0879631b93a3a4f0fad863a50ba0c0ad3c16599da482f9bd24ecaf
MD5 fdd7748d17b576da59bf9c15788b40f0
SHA1 fc1aaa587a005c0f8eb8e6bba31fcc08cd006cee
SHA512 1bd96f916e911312bf2831ebe9154ebd95ae3609917aa3d169df6d755b7269265aefb82a8463e014117beb95ab65d0bbd1338029acb461d1544ad1f6f0f8b1d5
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads