07d47a836fe5f766119bfc3ed8f9f4c51db57890a2252f44712e1fa043a20bae

Analysis

max time kernel
94s
max time network
145s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
01/07/2024, 08:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ec3e046e3ec9519fde99e35cfae3a958.apk
Size

5.3MB
MD5

ec3e046e3ec9519fde99e35cfae3a958
SHA1

cc6caaf13f5ef7b5e845cee881c0fd63b3d48455
SHA256

07d47a836fe5f766119bfc3ed8f9f4c51db57890a2252f44712e1fa043a20bae
SHA512

9ff9503f5f0335263f310522f39ec5b36fec0ed4a99062df8c2ad9cb78df9c91ae57ecf3f02f81f91574d0ec6679dbcb9d5475856ccc8c50de58176b792b2762
SSDEEP

98304:HX6vH0fpdsCl039pnVVuzpVMAPHS8rf/O+T1LUhkeSUC/v9pWZHT/JoTwr5xpiXu:qvH0fpstpnVMVMAPHZhpLGke/gWVhpD

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.shineinterview

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.shineinterview

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.shineinterview

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.shineinterview

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.shineinterview

com.example.shineinterview
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4968

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.shineinterview/files/profileInstalled

Filesize
24B

MD5
8e10efea416dbf46ac532384deefb037

SHA1
df770468a36d72bfc0c93d1e91cf65baf9009600

SHA256
ff4259af772be9e43c45b73bf690ca44cc96e67cb1d55ee4bc21a355adf62015

SHA512
7991a35696a0cdafe52af933212de71b3606624e2a2a6c2aaf59bf287e6ccafed6b24cdaffc883d8a5d311cd4757db63b67f733330f48045875133a31e4f3714

Download Submit
/data/data/com.example.shineinterview/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
ae2088c4f82120c57bb1c5a8669f1fb9

SHA1
a0e5f86c5f8e2dc76654d2316b5c281f80865f73

SHA256
b8edb534c29ad62052358e8f3d7fadff0dc7e5d9b8bc62f9c67db5d71f3d8290

SHA512
38ea1b1cda697d6773a3df84b16260b13afac5ae30e583f9c9ad4df8e0e650a1c66c359cf54493af22366d09812f114710e1bdb56e4442b25935d4da1abc9765

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
1KB

MD5
a9c5111aad72022a092dcf2436762c8d

SHA1
26a467b78bc11a467f4606a31e6b3fc2ea72f0cb

SHA256
dc7cb49f8558b6696e2d2a8bf432ae36735e2aaebc0697f3745d97edb6e42a76

SHA512
d86a5a4b4d30f148b6c115d7ff192e796a91a228a8f9314fca355a558feaff343eb55bd5265cf543ab61f0aba5d0352fc9d6ff2d38aca1592075855167919d33

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
3KB

MD5
75d5043ef9a3eafad7e98d9b9b9c20b4

SHA1
387138a29cc48eeefe4ea3a958258d3ca06842b6

SHA256
4c1af660240653e3c8c23ed20adb8a257cfad0b859939ed64605064b9f080afb

SHA512
21069da62f264dc098dd46b9b325cc3a3997728d1121706e7d24299a3ee8048e6de04b69e4e28c112bd1591adba4e0f53f9171efd43cd2ef4b62cb6e187fa582

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads