Analysis
-
max time kernel
5s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
28-06-2024 22:06
Behavioral task
behavioral1
Sample
1e6cccce8a46aff2c607ee4092f5d2c778e3b0b6d7ae0ed7ac673e5702d0ddec.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
1e6cccce8a46aff2c607ee4092f5d2c778e3b0b6d7ae0ed7ac673e5702d0ddec.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
1e6cccce8a46aff2c607ee4092f5d2c778e3b0b6d7ae0ed7ac673e5702d0ddec.apk
-
Size
3.5MB
-
MD5
39f9c0603e5a3422f5c41071680ebd81
-
SHA1
2ccdea0c77d2c3447f0d89cd43379f64eadb934f
-
SHA256
1e6cccce8a46aff2c607ee4092f5d2c778e3b0b6d7ae0ed7ac673e5702d0ddec
-
SHA512
2a0a1591103e2a911edc3c4a32627838da6437f07c17b4378c229a11f54251fac597e928542fe233c1b6e26f04f55f2651a3c94ddcd75808dc1bb9edf3078dc7
-
SSDEEP
98304:t/uLod7dpDnoagxlToTwr5LCzdOGAXk0Ji0KV:E69XY/9XkOM
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.drnull.v5 -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.drnull.v5 -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.drnull.v5 -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.drnull.v5 -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.drnull.v5
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5e33078906b0e56528105ca39058f3030
SHA190ec97559cfdfaa67764dab3f1d0da3b5909f02a
SHA256130964bcd08d971753e6eba87980ba6b6d4ac4b61fc4644dd80896a1653ff8d8
SHA5124d8537258e23ada1ba2f2580b70c3083bcd18a8d48954617f450e76dbd6fedc6e2dbb9c77f9a66c5d9a201887c08b84e0a5a0674d585531ca1409eb4d1f00135
-
Filesize
512B
MD59ebc797ab10d708c3d274d65483aa8f0
SHA1a6846f2c18eb6b866e30aa82238f3af9687ccd4a
SHA256834d6515f2337fc774666eafd61a49ce326dd3653adc459d1f9e0889729b5864
SHA512d409d1f7bd36a3954f12525ea891f20b76529d5026ad70c0cb8aa9db6f025a892690cb24e023be5fe3b63ba4b9f2594797eb8c2ac1c0563b3d1adfd1b0d75c59
-
Filesize
8KB
MD5a296c582b55dfd122d7a0dae925a23a8
SHA1dbdcabc44640c84c1c77d511c29ac60704cac5f9
SHA2561dba073735fda759cb8202b38d3354707074f6c74d8e103d48e549210b8243e3
SHA512f2ad6bdc849b26c51fbd8d663330a7bd54fce63ff80b8769edfb0ee8c299800e7b4f70f534c52b6f0240bb7e372049ae7bc4d5eb615a416c2c68a70df76a5d50
-
Filesize
8KB
MD53cc6ed59a663502b9c8e26a7a9fd7170
SHA12b014a87803bf5f63f2be76317fcabe6296b05ee
SHA256fbf8bc324c78e8369ad6a9209b6a20083a092f893eed62df928977b8561dda0a
SHA512c6dfc11034c5d89d7a1bf71bc33853d2f2e9fa5010fa5c6aceba90ac32edd724798d976d50bad26e57df6a398c9b29a31ae1510f99e71b909f5c0b8c4112e303
-
Filesize
90B
MD5b03e131189b09972ea1bf5709756ab6a
SHA120622dbeef5e532d1cea04c3ddd986f8049849e3
SHA2563ee336181c5a297aa282c2ee37dad777b00cb230be83c58bca24e10bd006c251
SHA51256ea2ed7eb069e40e587bbcb7ce96ffa28b7ce98da0ddc79844f6957955d4b074488fd7ec233451dfbceb969cf2862a54f63059df2ce30dbee5e85f26d4d4c6d
-
Filesize
569B
MD574d131d6b06dfd6030ce37689770c77d
SHA1e31a08965f581a63bc729ffd6ad1476eda07315a
SHA2568b8d22971488299123bce10852023806a8fa66989fce1d59e3a2fb4236456f2e
SHA512ce8038617c737d4ffb10869e6802637dbaac74a7e7d8167cd4abcc517e3dc3335ae686d9bb1e214ede565bed861ec0861a2dd7499f4f3fc82337a0062dd4004c
-
Filesize
102B
MD5d843b7fb4ba0ab475fd9a649e2f46b4c
SHA133d841027b55fd2fdfecc1acea67e18df4df77fe
SHA256b7148b29a91b2c3ffd27ca6973c1f076f57a9f0de041fbc6a93a026c5d3c9c00
SHA51235207281a5549dd2ff9c3cfcca6c140befcc5f73a3642d6cd95ae66511568507d18edceffb2bbe9189ea20147f32d2decda73de153dee78f72e3e1ef26e774b7