07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36

Analysis

max time kernel
26s
max time network
173s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
24/06/2024, 18:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36.apk
Size 4.1MB
Sample240624-wn9sysydpk
SHA256 07635e9579511013c09b4d329dcf75448c6e6ceda9abf0ae31021d18735a5f36
MD5 53d1518576d2741a6731c4a10a93e6c6
SHA1 c217074c42e3f6b079b690adb02145fe83606d24
SHA512 ba5b702e6c2611218e69a5a4333378d832abecb3e42bb42587220a460d2ca113557a77a725f9e4f2681fcd3f44f9c66d00001cc1b146d9dc9c5f51ac8f2604fe
SSDEEP 49152:yy39CJkzC0s8fqaZAwaVjiuuAp0oTZrmq6+LFT+UmWFAsfIAPjJgI/hOrFki:y4CJkzHxfqa2wOitJq9oehOrFN
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel

customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4445

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 7cbcc724505278e3f95396499e509b54254e833766b222fcdc251070782e47d6
MD5 b2855c24b951ad0d26e9e51c910010cb
SHA1 25bf599862e49dff9ccd044c28f292802816b683
SHA512 8c442dc8c1c13b548bfccc3850beb3f6248eacdf9dcf97096ebf69760b40431b477c7e784fbe92796e1f5e9360631fdd2af7ed71e7dff895d8d65a6e20a30879
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/customersupportnew.kyc.eelectricitynewnormalcustomersupportnew.kyc.gasbillpannel/primary.prof
Size 2KB
SHA256 f62313a6b8583fe2a791247be621c6177432b4dd2469dca8ba8fd0d78ec5b2d5
MD5 88d7f774354ed803779d6121ed95bf43
SHA1 68334324345e78012a793c3d4de630640ed7406d
SHA512 ce053935cc56753bbb0084574de379ea76276a4a87ea4603fb7bd9c898378f49707969a5a17e053a8982bc117814eaf4ad165bb1a67f3b017a982b5830f7267d
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads