Analysis
-
max time kernel
86s -
max time network
89s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
27/09/2024, 13:54
General
-
Target
Instagram_src.apk
-
Size
5.5MB
-
MD5
74aad7d19cb878a536ef6522f53f337b
-
SHA1
80aa95eb50058ce57c6466714c717f160df28093
-
SHA256
fa90312f50c7a4f961ac8f802ee2e2cf3d559f0c38ea65cc1f03f8d830265472
-
SHA512
89db44002c960a38e9e0853cae9073212c1e106aba26017dd2f15d4029814bed49710f1c322e66a2dee9c6bf0bab3d7309ed2cf11fe71e1c76f885047c7b8eb1
-
SSDEEP
98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL31C8UofrFF3NP6a:NrXZJ6nicQHNaf8/IXrJaD1T3V6a
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 9 IoCs
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
sigma.male1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Requests accessing notifications (often used to intercept notifications before users become aware).
- Requests enabling of the accessibility settings.
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19B
MD56e0075dcc0b7ac222bea767743b61a33
SHA144b3eaebc17568ca6e120747fef61521137068d9
SHA256d0d1b610858419980e61586967769ed1bf001756aacbd5e00518b3b0eb83a402
SHA5129950d09e464f74889ae85d70e72e57197b8a2713518bb7901b2c7b6e1ae51dc7e53547b2865f0226bfcc3bd5ea530453298512f8ecbc7b790da3339b5e05cf42
-
Filesize
8B
MD53dd8e100ead4a3777f8cd900e025e3d8
SHA10f9526d88c6b3cdbaf42e99bb121632246df2121
SHA2562d3e1dbd022bb2a1c43a9fd0023dfd8a6b0043d2cb229229e9ca81b37e5641ba
SHA51207839b0892d6264cea58bd53ebd2137e4587f50c24cc9ea7ead1aa1498169d294ef56fb00b8f88c9a47ba194bad193829b99d39dac65f01db9383ef1f2dba7de