Analysis
-
max time kernel
108s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
02/08/2024, 22:07
Static task
static1
Behavioral task
behavioral1
Sample
60d172b1bdfbcb5ce4c0dca167d209b7f2482e36cc43cf3862fb403bda890982.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
60d172b1bdfbcb5ce4c0dca167d209b7f2482e36cc43cf3862fb403bda890982.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
60d172b1bdfbcb5ce4c0dca167d209b7f2482e36cc43cf3862fb403bda890982.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
60d172b1bdfbcb5ce4c0dca167d209b7f2482e36cc43cf3862fb403bda890982.apk
-
Size
4.7MB
-
MD5
1e5ea4830d53868125089cfd70544f04
-
SHA1
5e7bb45c16065987af04ba01dd73ca93793243f9
-
SHA256
60d172b1bdfbcb5ce4c0dca167d209b7f2482e36cc43cf3862fb403bda890982
-
SHA512
6e36d9d00faac2df8c4db81f4569156168907db5b5ecea1da88c20cec34e0e9d143c76d9201a4b9be0e6eb93d4295ea734e9be3b814d4c1273cb7abeef0f71f0
-
SSDEEP
98304:KTAmV8R7KQP9tyCWFtgxTAsukUb/mP0HglPlqKcpRn5sd7DKN4H4dm+:KkEINZWFtgVAbmP0AlPlqKcp95s6l
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.google.mesedoc357 -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.google.mesedoc357 -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.google.mesedoc357
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD574396594654b6fb393317f8b160db924
SHA1e83998dcb229cb77b2f126c39188765f6751b91c
SHA25637db8c04ccf4aa2e94b97bea7e221fb2e09e8dcca96032c9c729e23354df543a
SHA5127b0fff853186281f839923b88cb16266a98ad4de6b54fbd0f8a93bdfdffcb65acf29a8133b5ccf0f15c596fffbe9ea3b05ca86cd7eb5980aa726275b996f316a
-
Filesize
20KB
MD51cbb1d5a0e7614bbb8aac12d8885e701
SHA18073c3eb721bb19de09b977673e09d83ed6fdadc
SHA2565d931d00ced5d8df91bf59cf34271cbb8f430d2113311bc32c7ce85a76c4223f
SHA51236bee2deff8bbb3b700db2ebb04c8732c53d7713b210c87f42ff629310ef747e1eeb1900a3c7072a0f40ca8ccb1cbaf349e82820753d8e0882c04c0a1c9de00c
-
Filesize
33KB
MD501d28f393647fb15a9cdeb0d04051d90
SHA1c483ffd2fe6fd53cdd09cc11890a671191fab14e
SHA256ff89534dbb815992affe8516fae015b076163e0f516d8e27990cd1cf69c4f74a
SHA512e421040802ea33d24a9687a93818396142bba4a7213e5bc7f83628ef3117f82836e1c714db0a99dd6dddcdd55d9e9041305876765fc6cd1ae6a91838e41a7adb
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5d726a1b01f300103165e408c597646cf
SHA140eb363403671a6f0affda208182225fcb23e3b0
SHA256e76421aad43886e7a35234668ee8fa7d2c0d5810a5e12bd1ffba97c2e1c35aa6
SHA5129d6d7bfc3946d5b067eea6972c53d00c188b2f5cd8eb8a813f08e5229a8aa411ca97beff5e94caad065eb0d1a5f9383e0c91a4358bb25b1d09dfde504d55e8b9
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5447b13c89c9f9c69c29591732eae95b8
SHA14614ebe40ded188ca505b7ea3026c25f808960aa
SHA2564ede5d984e6f3f54d11f799a16e2b87444cb2e645b1ad95fd82f338fbfc31ca3
SHA512b629c9ac7be6d7b7e4f7e0db074f1cf8f495d6f2210ffae877f72f4454801b0048db016a2cc78b1ea6120c8ab0712ff23b38393e687eb70063c467511d5f3ba2
-
Filesize
108KB
MD55970ec4d76a875029adf4e6464f6bc2d
SHA15d719df3d435914960d258e833bef74a581fd07c
SHA256662ec301069ac37530a0e4605471c04c35d7f8c51665a63c23bc345fb60fb338
SHA51234cb71871f3241ebc52b7a9df4b2431373ddfa2b4a296354effe4cd6e093cf79314546b92c2d5d64b930e6ef5ed9da03ef079c86cb1c6cb591863326c62fecad