Analysis

  • max time kernel
    53s
  • max time network
    67s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    30-07-2024 14:28

General

  • Target

    67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a.apk

  • Size

    1.9MB

  • MD5

    2191424ce72d4b1bbe55fa317b44eee2

  • SHA1

    a57d8f915bed09fcf56b7f431117a4642b56fdb5

  • SHA256

    67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a

  • SHA512

    0c0e0370012486e43c5fa1692a0c95532dcef7ee5310ebf1e842b3b3d6d6fbaa5547650061b7943de5abb327db23282110a98e34022af737527da4575e912c05

  • SSDEEP

    49152:MXF3Ow1l/vjd3bwCCEUwYIhyt/8hxKNR8xYAk/ISYVvj/45M47jjU:MXFewPvjdrw7EULIi/6K8uv6juM4Xw

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Acquires the wake lock 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • market.nobitex.jibitex
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5042

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads