fe6ac68fb0cc9e549ce9114177930c0005aaf2add73218e7d8a80129aaa4227b

Analysis

max time kernel
179s
max time network
188s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
23-06-2024 23:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SFNDeportesparaTV1.51Beta.apk
Size

5.5MB
MD5

3b9079e5651344faed7c699b993ba438
SHA1

9328f4265f9cd97b74b08747ff7cdfdaabaf590d
SHA256

fe6ac68fb0cc9e549ce9114177930c0005aaf2add73218e7d8a80129aaa4227b
SHA512

fae014d90563e8e21f3153774c3c9ac221771b0e6cfce8a9c1ed6d05d5a195615605ca1ea050da6c8dfd37b8f7ef389b0571c8c165343bbf5ac19b13a4e54fac
SSDEEP

98304:DfYVizKTTaEp0FPQVAeQD59uwY28a4mWKgFdjn6Bbkn6fYgTiTwrDFNa:DfrzKTTn+LDfu48BmRcudzfYgLNa

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.sfnprojects.sfndeportestv

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.sfnprojects.sfndeportestv

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.sfnprojects.sfndeportestv

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sfnprojects.sfndeportestv

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.sfnprojects.sfndeportestv

com.sfnprojects.sfndeportestv
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5041

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sfnprojects.sfndeportestv/files/profileInstalled

Filesize
24B

MD5
9bedefe2cd91296963ee533f6161a98d

SHA1
be130ac8deb40da6ed1a2f338b726ceb6c5fff29

SHA256
71c5f3f953c5786efff682deff3270f970c120962d53347ab72c244f2c08389c

SHA512
258e9b371296dcdeccdb47df2ef04cb0482da2f131e834ff8f3cbdf6e1ace660e638a9ce2d6310e4935435681505563348fea3988855bb3fd550c2663b2077fb

Download Submit
/data/data/com.sfnprojects.sfndeportestv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
fb01fc00c74b7e3325c3479b317913e8

SHA1
8ca464c4a2eaced2abcefd40db193fe569ef71ab

SHA256
e8ded8ad723150f166c3f2d4d34be70c3b8f3df194b9bde19aa2ba78983d9671

SHA512
362fbb17a2e19861a8e496b7ab08a993cec5f5e6307207a716800eb21493acb1899889771f05f583b59e022bde7fdca6e56a6a3de5fc3733429dd546cf16434b

Download Submit
/data/misc/profiles/cur/0/com.sfnprojects.sfndeportestv/primary.prof

Filesize
2KB

MD5
2f83f461d1838c948394ae79fd73a510

SHA1
1608cd859958175384c45e61f5a7c96040f1f6f5

SHA256
2748378b115b10c3c3a300a1404f8e17a88e49d31a69fd6aab6f0c4891b8f03c

SHA512
4f2455f08ce00e33dd1682e2bc226cc90494db2eb447d797b47b43bf0b569bdcbc47fd70c17f0c6b62ab9a1ebec60714b358f493923523b309b297c6920b5a41

Download Submit
/data/misc/profiles/cur/0/com.sfnprojects.sfndeportestv/primary.prof

Filesize
3KB

MD5
5dec1beff45ff0b1a4825e1b64e3d094

SHA1
a9c5d3abc4ca19cb79fbe2998aa168d20705f12e

SHA256
eb454ce64e22d0702fc5f8fc7fe8fb08baa65ce859c2455c8f27630456fbd130

SHA512
519d19441b7b3577e725c6e97e26c8c50798564903d232d98a1a72fb3eb6c95ac4479c94e40f614bb8310d4d876e83b97c91dfc8011232a5d2abb6100e79b7d0

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads