30eba69c61ad8a77009101622f314b3accd5c5b7020b825dd478ab5bd451831c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30EBA69C61AD8A77009101622F314B3ACCD5C5B7020B825DD478AB5BD451831C.apk
Size

11.8MB
Sample

240627-kks59asdle
MD5

7ce5b293c444dbb689f5731c341e2968
SHA1

8d6a56494e9a140e87fae96a732035e1fd1b26fd
SHA256

30eba69c61ad8a77009101622f314b3accd5c5b7020b825dd478ab5bd451831c
SHA512

bb959fbe896a5edba4f7b91a5194c2b69f1fbff0aa861f9af4f28640c8402e1b30c0a647c9f0eff59bed184e4c71065491a0c1e9ea71449b5863457854fc958a
SSDEEP

196608:RaLvVHa+gm3PDTlGaTWOChwlO/OChwlO3lhBsUc8s7PXIYBlhBsUc8s7PXIYAlhE:+dLg4DTlGaWOChwQ/OChwQ3qIYBqIYAk

Score

8^/10

android collection credential_access discovery evasion impact persistence

Malware Config

Targets

- Target
  
  30EBA69C61AD8A77009101622F314B3ACCD5C5B7020B825DD478AB5BD451831C.apk
- Size
  
  11.8MB
- MD5
  
  7ce5b293c444dbb689f5731c341e2968
- SHA1
  
  8d6a56494e9a140e87fae96a732035e1fd1b26fd
- SHA256
  
  30eba69c61ad8a77009101622f314b3accd5c5b7020b825dd478ab5bd451831c
- SHA512
  
  bb959fbe896a5edba4f7b91a5194c2b69f1fbff0aa861f9af4f28640c8402e1b30c0a647c9f0eff59bed184e4c71065491a0c1e9ea71449b5863457854fc958a
- SSDEEP
  
  196608:RaLvVHa+gm3PDTlGaTWOChwlO/OChwlO3lhBsUc8s7PXIYBlhBsUc8s7PXIYAlhE:+dLg4DTlGaWOChwQ/OChwQ3qIYBqIYAk
Score

8^/10

discovery evasion impact persistence collection credential_access
- Checks if the Android device is rooted.
  evasion
- Checks Android system properties for emulator presence.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

collectioncredential_accessdiscoveryevasionimpactpersistence

behavioral3

collectioncredential_accessdiscoveryevasionimpact