Analysis
-
max time kernel
19s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
12/09/2024, 07:48
Behavioral task
behavioral1
Sample
base.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
base.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
base.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
base.apk
-
Size
2.8MB
-
MD5
312f62cb1d160b5fa58c811a0cc1d99b
-
SHA1
5aa873bad2b9be6b350db47e67ef5dbf3379dd49
-
SHA256
4e6dcfd43f37fde88b39f1f97c5079fcdce94cc75a5612f389454fb5fdd9868a
-
SHA512
f4f4c3f1c6c509f734e5588c519cd9ce680acadc62d90038431a06106158759ca9d1be1a7606654ac54e6c11f2643ede468a223b83bf7ebfe9fe80d7336003f8
-
SSDEEP
49152:vKu2GSlhq+gpveu9LJOwtQMCY9Guk/Bkoa3lNf0viCsjRCOQEbTbbDj:SGSl0veuDCMk/GoajySjRCyLj
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener x.akuma.x -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock x.akuma.x -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo x.akuma.x -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone x.akuma.x -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver x.akuma.x -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo x.akuma.x
Processes
-
x.akuma.x1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4995
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5b889fc7725cf677fd628c2b952515f5d
SHA18bb0a5c7aac65ebe3ad573f7f9dec8467f7b7f36
SHA25673da2b43243b02d8298185866ce4e8d3a4dc379e09d74d924c49ce36323e86f6
SHA512f61e8e7d3cd6f006b06a4806a485ca327ec3b5dfb8cad956635ff935180547eb518464c5adb18679032e0134b0fad1578c0bbd480ed55335e8002152aa012c58
-
Filesize
16KB
MD50067e524b4aca39a7863997eed099714
SHA1077163eedf61d5d148e64c2ab02ac47ed8387357
SHA2567c04e21fa64dc3a5de912da6ecf35347be242612e3e2d9a1ac86a3429f2c1ea6
SHA5128061dd2973c182d685c3ca5e98c38ffa2d22befcc9a1f633084d1eeb45aa7ac475b175736f4ac62c1fcf1e8c1b82773d6eee233d9511531bd134d7a4d30ddc57
-
Filesize
16KB
MD521fd9d88489e31ca8eb082d75e9b5330
SHA13bdb2b19683c7e875bcd1d5f110f908bc880b176
SHA256018c198ce00a707515a3c1fc4d344976deea3c67b5f77f48d62ae0dfbac94220
SHA51207889172a4fee5f79846edf99591f8efd98e875d537eb94ecb9244a70fa8a99ba24eba1f9a52cc6eb7a6b703787e79771a41410a14fa6d68e55c70ff452de011
-
Filesize
16KB
MD5d3be8d6a79205d6d489244b85dfa20b1
SHA1cf10fee1ece5a7e33c554af5228167fb4d30504b
SHA256a38c6a94ba56fdb678880e653a4e26a1c9cfe9873e335c8743cfa829e4f41409
SHA512dc6da45c41f131adab7704f71dba305d1cf9fd80cf6a6cd5b48617719cc2dbb9370a00a03b13d14d3f06bfd2f728232903bf8a18faf7206849c8d663e21e0484
-
Filesize
16KB
MD5adf6082723784327d7d1b34adf974e7d
SHA1b1502f70eb881a1dfe41139cb719fefb877ee37c
SHA256252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
SHA512762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
8KB
MD51dea3a16e38c4ba4a6bb9c032353d006
SHA14302ceedd60aa4bfeee3a0470db474fb0973912b
SHA256ba04b88894e892e417842acdb71286f8b4dcee45ee886ff90c02500ca24e4cae
SHA5127a09a1bfba2f58dc3f3f7371a035baa80fb0a78c6e8143837b818aaac88cc3d6e7d63eb1ce7a9e2239970dd867631102166f1cdb4e926f9f1f0a4d4b99570f3d
-
Filesize
8KB
MD504c77bf71e8e61c573f5159a5d96fa77
SHA170fcc549b7cf503fbf8919b2ab39493d538ced18
SHA2566fe03ace7888284a4f7d89757402b0667b957e9498ae36d0b963b9f304e85589
SHA51212409ff525252737e55b65cd02866dd041787cd6703b31b30d3c37972e635f7b0e90a6b53a40f78a2d0ba2747181c0694aecab5b1fee8954bc3d61f407154725
-
Filesize
512B
MD59f835ae3b5f2bee0a41d42d7c89db363
SHA10d1ae943b28acb40fab1cf9eda164a3470fa3ef3
SHA2568d15f247619a21d756cf460d050eef3e05f233aa5d6641e48b78864307bf3df8
SHA512bb13264015481da0b837c3581e98fd31762042bf45e77d88b236135e5437f89e32eecfcf55aafe56fcbaf0eda9314e668971ddfb8adbcdfaa6db3e55d50bf16a
-
Filesize
8KB
MD532c450dda82185a09e7ca271566b51e2
SHA1f4c205aa1ebbebc5d3e63cf34791a34a2b08ac70
SHA25667ba4f4e87abe61624c1cd2b91818e211a2fbf0d3352a6bc0efbeb083b3a4377
SHA51267d6d72cf99dc3e9660d1ac01e0899103ca7ceb62c7f0c67d4b038ba78dcaf35598d17d195d8dfbe800e03601bc78740513a8c8cbae1f556200c26a8e70dfba4
-
Filesize
4KB
MD5c2568be94eb7d639964a1a56acac323e
SHA1848560b7f7f01868cdcc1e8526fb51589d3da650
SHA256c03bc0cb5f6ba51a741e8f82034543c528e4d7433a9571be4b186c1a394515da
SHA512de46b0a84c5c476d3d7cff380b6c488d752f64a288e972d57b3fcf65de49ae84caad155b3a42f6c7041c0a975b0cf3bfe1310eb5f51c4059107c21b534fc0f13
-
Filesize
8KB
MD5665b531a8140237decb17c0d5933c0c1
SHA12bc3cf1412a4094e8dffeb7d34a3cc3587815043
SHA25689d58e27a6fe73fb5db1fa15a8327154ab07918efae8d7181421b378b08e29d8
SHA5126cb27cddaad1202e843e421d5518f78d3e23ef3fedc49d8d3c92b73840d7dc61361a94632d83cb3050fb53b509115f58124ccd3265e25077625a8ec63b110133
-
Filesize
566B
MD542a52ce9d2ac8fa4cd7573f40355e575
SHA158570e2442775fbae8af3a3fe6e8c718f056cb9e
SHA256e58ad7bb82a5f06368bb2d9fcd5137bedbf180a21ccca9e690c01247a47203a9
SHA512d483ee013d648878584c7a24bcd443d5d7f2f37bfc9bbc2cd20affb9a770ab7c018f8c9c01c347b40bea6d6853b23355253b3acfe4d2ed942b32a6eedd57db1b
-
Filesize
90B
MD571b128fdeecc0d5235f12351dea35543
SHA1724f22cc50f972ffd64d4bea5c74cccc0d3d4d0f
SHA2562f0ac63d04a879ef932fa06ca408727dd8b0207d9f6c4dac800771ea13a1e2f8
SHA512a03214c1a5463433fbc7d62c5435d0d79549e859c504bca9454e58a5ffd08562fea49e9e6f9bec182f0438ed4d7a8b626437686042888a56fa1a83df6074e22f