b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451

Resubmissions

06/09/2024, 14:29

240906-rtlwvs1drr6

06/09/2024, 14:08

06/09/2024, 13:40

06/09/2024, 13:39

28/08/2024, 15:20

28/08/2024, 13:31

06/08/2024, 09:54

06/08/2024, 09:51

Analysis

max time kernel
988s
max time network
1050s
platform
android_x64
resource
android-x64-20240624-es
resource tags

androidarch:x64arch:x86image:android-x64-20240624-eslocale:es-esos:android-10-x64system
submitted
06/09/2024, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451.apk
Size 3.0MB
Sample240906-rfkrms1dne
SHA256 b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
MD5 2c675f9f2b5176983f3f514ef599aca5
SHA1 2f75fa94b89417f8f8b32de3f7e784b9465e3cc4
SHA512 9ec7fc6462332e439e1435542520aaebab3e786b6b2de8e0a98864c428a73cf0cb8c490ea0b1113c0493c8029f9fcfbd940f2f310bf107553f81732541086f81
SSDEEP 98304:l8ACxpNV/QSf6o7pmQ5GLSGRR/NzSQBa2k+/+m:l8ACb/Iop5GRhra2fb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.stub

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.stub

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.stub

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.stub

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.stub

com.stub
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4938