Analysis
-
max time kernel
16s -
max time network
33s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
25-06-2024 08:12
Behavioral task
behavioral1
Sample
com.universalcoinminer.cryptonight.apk
Resource
android-x64-20240624-en
android-10-x64
5 signatures
1200 seconds
General
-
Target
com.universalcoinminer.cryptonight.apk
-
Size
13.8MB
-
MD5
49e1c42d2a73804797bd9cb8ac79e258
-
SHA1
c2fd54cbcf327f2fda474817775d72db28b8be50
-
SHA256
9b14c548e907abda6a6ef0d257ff626395dd00bd7b07366be0cb9e2e1b8f1ebf
-
SHA512
b369b99faa31adb99fbc677b1371602a95dfdd8109b5debeb9c7818b615aff8ac8fa4ffcd28aa073a7dc7adac97e2873a46e5ccfbf2266f335fd8feb31174e77
-
SSDEEP
393216:TFq7jnC7ZiiEIwVmRipdlZE3xizNSyDYEZUDS36Yx:8nlIEUipR4izNSyDpZUDY9
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
com.universalcoinminer.cryptonightdescription ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.universalcoinminer.cryptonight -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.universalcoinminer.cryptonightdescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.universalcoinminer.cryptonight -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.universalcoinminer.cryptonightdescription ioc Process Framework service call android.app.IActivityManager.registerReceiver com.universalcoinminer.cryptonight -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.universalcoinminer.cryptonightdescription ioc Process File opened for read /proc/cpuinfo com.universalcoinminer.cryptonight -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.universalcoinminer.cryptonightdescription ioc Process File opened for read /proc/meminfo com.universalcoinminer.cryptonight