21b27c0e14e8e4d193e134440f2a863721f80a6d96521ead46bea71e0f89b1fc

Analysis

max time kernel
26s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
26-07-2024 11:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4818d538f62d0f5a94b47cda5ff21236.apk
Size

3.6MB
MD5

4818d538f62d0f5a94b47cda5ff21236
SHA1

b864a6b27e6fce722a17ec27a3b6478ecb235230
SHA256

21b27c0e14e8e4d193e134440f2a863721f80a6d96521ead46bea71e0f89b1fc
SHA512

15fcf1ec37fbcb8835ad88d08aadbc7d465b96958899e16b9b75fbbe2d1861a4cbf1337a8fd04d0de03245cdc448b20a74d7232cfbc4f61d8b6bff2dfe35416d
SSDEEP

98304:O8lGWVMz8PiEI/vw7Dh9EjRJvzhM0o/KrTgVy:O8Ly8PU/o79KnvzhaVy

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.gurujifinder.mjpro

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.gurujifinder.mjpro
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.gurujifinder.mjpro

description ioc process

File opened for read /proc/cpuinfo com.gurujifinder.mjpro
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.gurujifinder.mjpro

description ioc process

File opened for read /proc/meminfo com.gurujifinder.mjpro

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.gurujifinder.mjpro

description	ioc	process
File opened for read	/proc/cpuinfo	com.gurujifinder.mjpro

description	ioc	process
File opened for read	/proc/meminfo	com.gurujifinder.mjpro

com.gurujifinder.mjpro
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4620

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gurujifinder.mjpro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
1168870e6a925b6d30d241fac1ea4f12

SHA1
439ddb36580965674f5d5b40b73088a26620545a

SHA256
00f03b7aa8cb1d8689d4636344268bc2555853071fd10db8533586441aaf797f

SHA512
84f53187a788f9cba8e1e93da1e997c9ab2aabb795c620095e84e047bae6cbcfb597bf97b610f8321d817128edaa77624c7a34011583062d2efaf57116b19e86

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
1KB

MD5
654d88f97c7a9df02da17d3b3ec1548f

SHA1
996705cede55723e80f019cd03e9bc1f857d341a

SHA256
55a7843808faee02c2b0e2a346cea16192475acc6b465e67fd01043a041b0ebf

SHA512
90d1f34e4de2ef97ae67494cacac5d6cb48b588186db28e95413befd252420cd716fdca0e531694bea1026cc02abf73ab7cd88105c0ee18c6dc5f37abff72109

Download Submit