3463f2bf09900e924cd2dc0acb1a4ca89e37c74122425c43526dce9aa7a53b6a

Analysis

max time kernel
29s
max time network
168s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28-07-2024 09:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cxt.apk
Size

137KB
MD5

334be52bc5aeb1efc7a50524d115b414
SHA1

d218e7e755247223b4d72af356795b17a690de49
SHA256

9ec4d1c69e500af04448426ed0fccb5d900ff9e98fc6bfddfbe2c215851af2f7
SHA512

851a2b78edbad000a98a065d7beb865c5d6ef88229bf3472b6fa3ebc069ecee0574e76090f8ae7e9a6c3cf0e186a94dc8752b21789434c368601642f9478ed55
SSDEEP

3072:rUjHxICepqChUuGWhkUt06rkTJqYb0kfP4MT8dNTsSDT96hatTvLj:4jx6UMpr4qYM487YSP98WT/

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

Processes:

com.myapp.exs

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.myapp.exs

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

com.myapp.exs

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.myapp.exs

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.myapp.exs

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.myapp.exs

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.myapp.exs

description	ioc	Process
File opened for read	/proc/cpuinfo	com.myapp.exs

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

com.myapp.exs

description	ioc	Process
File opened for read	/proc/meminfo	com.myapp.exs

com.myapp.exs
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4972