2f05f054fdf24f11ba6e81bc8f51e9719c85e190052a79e4c70af1f64bbe6be5

Analysis

max time kernel
47s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
09/09/2024, 22:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2f05f054fdf24f11ba6e81bc8f51e9719c85e190052a79e4c70af1f64bbe6be5.apk
Size

1.6MB
MD5

57a0041ff5791fa52227145dc94b073f
SHA1

46c6696fc2084192e4931c1b164fce7e8c235e92
SHA256

2f05f054fdf24f11ba6e81bc8f51e9719c85e190052a79e4c70af1f64bbe6be5
SHA512

3b573c7a90dc4edd6dc2866d01f24a9c89cb81fa21cf2d30f08ac05b10a6ff2c7e8b5b66047a249b74adf79af4e4704063b955353fa38e6cdf26aa90606be793
SSDEEP

24576:QDDzfaReQQc+k8MAjXhBSaMBggbGR4hEDIDMXtbRgdXtngrhER0v:QPzfaRudPHsaMBggyhcD49RgdXt+hEKv

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.cannav.cuasimodo.jumper

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
12	whatismyip.akamai.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.cannav.cuasimodo.jumper

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.cannav.cuasimodo.jumper

com.cannav.cuasimodo.jumper
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4805

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads