Analysis
-
max time kernel
48s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
28-07-2024 09:58
General
-
Target
pdfapp.apk
-
Size
1.6MB
-
MD5
f2d40dd7a7c77e50654a3d6246be7bb6
-
SHA1
abf53d1f0bb63190769eab8d385a8fed759567ef
-
SHA256
b570a95ae8eeebc81d8cb9d5780ec1a1ddf7b0cfdfe06794bb6f21d21e744aa4
-
SHA512
78c6e74215c760b84244da4c3a1327ab10f3ad348ced598670d900f3882e3a770e7a06fb07f29a785d6a9c25f55e6340c3b510220a00912d156c3490d3c31c4a
-
SSDEEP
24576:AeyhEbMw0LMt+vPWwD/wFkTr90TOoL2faqYtzNmjQ3km3jKlFkZB6wh5fWO3dENo:Aeyh4MtoCPu2n9xstmQ3kejoMOO362
Score
7/10
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.appmaker.testpdf1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information