Analysis
-
max time kernel
161s -
max time network
180s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
02-08-2024 02:08
General
-
Target
97e63e6063345318325b666c54cdffb474725349d948626ef5671bb22020e335.apk
-
Size
44KB
-
MD5
6c92b035eb2d537146d480dfb1d0cec8
-
SHA1
825fe03f6a74c64c67c9d3397e171c9fd0c1bbaa
-
SHA256
97e63e6063345318325b666c54cdffb474725349d948626ef5671bb22020e335
-
SHA512
e6de2a14225f0d14d669b799a00974255ec6e266ee454e3326e422088c21bb2836b93b11f9a6d6d3367e1ed0e5140ee4a7f1df78e9dc5843079e4eca0c7a3e0a
-
SSDEEP
768:qUAcH4h5nNNW35xw2m0sQZnBF2pDAY9NAWW/GCFzKmK/3Sd7:qj35NedFZnOAY9NAWWdFzkvC7
Score
7/10
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.flayvr.flayvr1⤵
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information