Analysis
- max time kernel
179s - max time network
187s - platform
android_x64 - resource
android-x64-arm64-20240611.1-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system - submitted
23/06/2024, 01:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a5b757d9527de05813cd5b09e09b169649ba26f26b484b7591dc8b7548fcbc9.apk
Resource
android-x86-arm-20240611.1-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a5b757d9527de05813cd5b09e09b169649ba26f26b484b7591dc8b7548fcbc9.apk
Resource
android-x64-20240611.1-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
6a5b757d9527de05813cd5b09e09b169649ba26f26b484b7591dc8b7548fcbc9.apk
Resource
android-x64-arm64-20240611.1-en
4 signatures
150 seconds
General
- Target 6a5b757d9527de05813cd5b09e09b169649ba26f26b484b7591dc8b7548fcbc9.apk
- Size 3.9MB
- Sample240623-blybxstema
- SHA256 6a5b757d9527de05813cd5b09e09b169649ba26f26b484b7591dc8b7548fcbc9
- MD5 4664fc9ddf71f060029be4a356b0cb5a
- SHA1 3bedbd1270e5edd98550f18dc54df31b59c7fac8
- SHA512 a9a1fb94ce80fb9b0a4bebeed9667092fcd23e91e3fd050742b8c0ec51957e2ffcf06c0ad4d7ff4cdf2b639221ddfec5c83bc32f5213b0fc3ce8a39f987a054a
- SSDEEP 98304:M/y68hRZC4VcL2JmbwIf8edar7KOfx8gLCrZo:vhRZtVWynI0X/TR
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener za.co.freeurl.easybetapp.forward - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo za.co.freeurl.easybetapp.forward - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo za.co.freeurl.easybetapp.forward - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo za.co.freeurl.easybetapp.forward
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/za.co.freeurl.easybetapp.forward/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 cd10c1a20dfcbef1bc15a359836d7fbfa02988745336d3211a238c89faed99e7
- MD5 129e537e7b5501fab62ea6a64a4872a1
- SHA1 bcc0c2adec7f8289d77bc31b96d3c86cbedb64be
- SHA512 50da9ee5f2e2e73870df0eaddd80d4458021ddafe0c359d42be0c27456f8a7c09ff78c33769d9eeecd589cfc848de49180ed11b479d9ff19f84df6d3350f6225
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/za.co.freeurl.easybetapp.forward/primary.prof
- Size 1KB
- SHA256 2abe03a42fe30059cb37b1dd7ddd10da9706547e5e09a4305d4a7944df4ec10a
- MD5 2a8aa01d48388e61e27be8fd8d0d2acf
- SHA1 53f66184b028af94dbe3375b13c349c3519af7fd
- SHA512 88d83a71985b50537921d9c56cc9c61afb252f377bce9dec2815481d285152240b8c2bb28a744f2f45968331f1573b615255d0fcaa22d19b08623d497e21a2f2
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/za.co.freeurl.easybetapp.forward/primary.prof
- Size 2KB
- SHA256 8ab87df5a69fd9120d8fea1e58a0825e5588c0ba4db6ddd4cf2dd02dae9db990
- MD5 e984ca2751524cea896dd84dab71bbd2
- SHA1 33c78f0b6786a15bd6fdb4d0bd96da870a1090d3
- SHA512 2cc81880939e438bf6987ff52cd2a6f13b554655c50eac14d3cddba139ee05b0be61a2be361f308f52b8a6febbebd7df697b79c4694325cf33fa382b557fa24a
- MD5 SHA1 SHA512