Analysis
- max time kernel
26s - max time network
155s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
24/06/2024, 18:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36.apk
Resource
android-x86-arm-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36.apk
Resource
android-x64-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36.apk
Resource
android-x64-arm64-20240624-en
3 signatures
150 seconds
General
- Target 07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36.apk
- Size 4.1MB
- Sample240624-wn9sysydpk
- SHA256 07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36
- MD5 53d1518576d2741a6731c4a10a93e6c6
- SHA1 c217074c42e3f6b079b690adb02145fe83606d24
- SHA512 ba5b702e6c2611218e69a5a4333378d832abecb3e42bb42587220a460d2ca113557a77a725f9e4f2681fcd3f44f9c66d00001cc1b146d9dc9c5f51ac8f2604fe
- SSDEEP 49152:yy39CJkzC0s8fqaZAwaVjiuuAp0oTZrmq6+LFT+UmWFAsfIAPjJgI/hOrFki:y4CJkzHxfqa2wOitJq9oehOrFN
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel
Processes
-
customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4972
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel/files/profileInstalled
- Size 24B
- SHA256 9a0384dbc3f8af7aa46d90226ea56f48fd150b5cbb0d8f90bd6285d4061c2d18
- MD5 62bc175a0a47560bda1e8cdfdf2092cd
- SHA1 8888ef25a5d22934d183e534d697c38f79d7df70
- SHA512 6318c14a68fcfe4bfc57d13ff6bcee5becf32c6472e7e9df964b95789e3bafe6f907910fa5309da387aa4219a37fa066944593ac62c2feba81f14a0d42f1b0e3
- MD5 SHA1 SHA512
- Path /data/data/customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0f1660c6497baa3289a33d5739f2b072a6eb6eec9745be7bf8d1ec4b1c2a58cf
- MD5 c6e59aae60dfdfe187d9f20073d71abb
- SHA1 bf73d49c20f84dcd923da11789fd9a1bed29a6a4
- SHA512 d508a818ae0dfc9bb3ff7a52c6f120e8f96e2247b1808e21f25d1c9959b7846a85f470df535e9a559958b968156a5dc2296206c81353deafdf9e0f3702e6e064
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel/primary.prof
- Size 2KB
- SHA256 f62313a6b8583fe2a791247be621c6177432b4dd2469dca8ba8fd0d78ec5b2d5
- MD5 88d7f774354ed803779d6121ed95bf43
- SHA1 68334324345e78012a793c3d4de630640ed7406d
- SHA512 ce053935cc56753bbb0084574de379ea76276a4a87ea4603fb7bd9c898378f49707969a5a17e053a8982bc117814eaf4ad165bb1a67f3b017a982b5830f7267d
- MD5 SHA1 SHA512