d0daa4ffd957a54e54c41c81dfc5fa481aeafeabc98029b75e8f13b78c9b6351

Analysis

max time kernel
46s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
25-07-2024 13:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9641c55ca649c26ff9bf2932e970c553.apk
Size

5.3MB
MD5

9641c55ca649c26ff9bf2932e970c553
SHA1

989277e285bcf8687bf937e27f80028e01ab8196
SHA256

d0daa4ffd957a54e54c41c81dfc5fa481aeafeabc98029b75e8f13b78c9b6351
SHA512

e39e7f3d8c5c85e8b08f8ea4207328d6a440502f3c6f52747ef3342aad35c90dd9681464e04d5e1550c0c9f1f0c00997d83b82e9f4b5141ddca26ca0c66867fe
SSDEEP

98304:uLhK/jk5IH15VFZW1s2/xZ+hbFqF/G89vtqanxNPtLyCfWXpOyrAEj3dYMYMvo/n:+c/jUq15eohFRsvtqanLPVHWXpOyr9xI

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.gurujifinder.mjpro

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.gurujifinder.mjpro

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.gurujifinder.mjpro

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gurujifinder.mjpro

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gurujifinder.mjpro

com.gurujifinder.mjpro
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4944

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gurujifinder.mjpro/files/profileInstalled

Filesize
24B

MD5
26a21660e59250e34edb143e49c873ec

SHA1
d2b9b2af753f42a1a7c2e310254c51c445c3396b

SHA256
0952dc3792fb03b8b19e54834d758284ccc166301089798b8135538e476e9740

SHA512
073a556d8e689c3ccc67a1b48624aa9352c59f350fef53b45b415f779cb3f68b160c9170c6feab383e3edf289f2199e2dafef2be55bd50ae6402e5d0130dd603

Download Submit
/data/data/com.gurujifinder.mjpro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
e0a58b05c9cec023af054ecf1b1b0f2c

SHA1
64dd962a092040b3bb9244efa93b1b3a0d53ae34

SHA256
b3ce0f6b9b35109b8bd1b886f97c15ba40858f094a8a5cca993895bcc2604581

SHA512
1ceee7bd5b7f89dec6143936752db6e816cc9ddf1bb3f3247483f7c9a5b506d125832e72170be2fb733954492995a63a7785c238da8cb100f9889021444c1d0c

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
2KB

MD5
d1d6a5aaf24fcd4f964fc56fa8eabd9c

SHA1
6fa744180eb33146dc308483564179dc588ae1f9

SHA256
d2616284cdaab55956ba19ae2c5e1257be3f5f253a336ac75e6c7d6aad4f7022

SHA512
74f366e4cf64cf1c3b3d765685343feb9ea0fe46c1964dd200e9f5a7be06b3a033f05b124e3a24c1023ec33df299c0c495ad6e28b5882607c8485e1aabdf2669

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
3KB

MD5
eb15dc08928e7ca6e365e4a79aa2fe77

SHA1
7f147c8404f0a09696aca6525e96888a4c2c5058

SHA256
8452236ffbf3cbc2809e3b86b3b8cbb0482ae81737e014e2a63752a56f151c37

SHA512
562e8042ce6c0975aa4ecfcc0247b3c7c7ee9eb577c4a2d6a149d8ffb949f5e28cc4bfdc0dde19048f6d2550e71e8aca335a23a3c38c91a8b554b96b9c46da30

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads