33cc4aec8fe4e5aec0f167bcf597ce077cca846e26554527afa29e7e245642c0

Analysis

max time kernel
29s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
07/07/2024, 10:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40870d7e730f3cb7703d6452ac59e80c.apk
Size

4.4MB
MD5

40870d7e730f3cb7703d6452ac59e80c
SHA1

8c17593405a97161cc439fbcb03a6d2c33f13d17
SHA256

33cc4aec8fe4e5aec0f167bcf597ce077cca846e26554527afa29e7e245642c0
SHA512

cad407ebc2c8f8183a50bb28c62e000dfc5cfc6065d98f55758f59e8ba9bfc47f8b38f961289200e0874c8641422feb2f9f6ecc15eaf2f891ada1d2efd0b0302
SSDEEP

98304:9YiBlYUOlvBZjypRFOy9E6tSqILjey90ylshHuEzlAwRvZ32:9YiBlYUA21ErjeByquwM

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	apnapuram.pk.sbisms2new

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	apnapuram.pk.sbisms2new

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	apnapuram.pk.sbisms2new

apnapuram.pk.sbisms2new
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4631

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/apnapuram.pk.sbisms2new/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
afc063a22aaca0628fc3f4b744025186

SHA1
f034a48aebb631a0829d66628f89613c6ddd3076

SHA256
248bb97374d9a0e1d8ebd3727f6807a73a56726a3a306b9978ba8285ff237a3d

SHA512
03f0831b8da96447dc2f26b0499cbbe2deb4de3b21be0eb106bc9b5e09fa71574698e4ceb8bc0cb0423488735b59fc410902b901ac7aa7d02144676f1871da61

Download Submit
/data/misc/profiles/cur/0/apnapuram.pk.sbisms2new/primary.prof

Filesize
1KB

MD5
ce0caaaf7808260fad29ed649b5a0bc8

SHA1
90ecb280a6e27f9135de58284e7ddfd45ff84652

SHA256
06fc23458c35d2d0b8c57f610ef4db4d9441cbde0d8588fe224427a007306f9f

SHA512
549c554f8af7158362c129b614020ddf13fed0d95715414dfdf22a4e02c5a3120d44f745acee6c07e89b24cf1c33066ff898ee60fa6196a932ca6ec805130988

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads