Analysis
-
max time kernel
149s -
max time network
159s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
27/09/2024, 15:48
General
-
Target
Instagramsrc.apk
-
Size
5.5MB
-
MD5
74aad7d19cb878a536ef6522f53f337b
-
SHA1
80aa95eb50058ce57c6466714c717f160df28093
-
SHA256
fa90312f50c7a4f961ac8f802ee2e2cf3d559f0c38ea65cc1f03f8d830265472
-
SHA512
89db44002c960a38e9e0853cae9073212c1e106aba26017dd2f15d4029814bed49710f1c322e66a2dee9c6bf0bab3d7309ed2cf11fe71e1c76f885047c7b8eb1
-
SSDEEP
98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL31C8UofrFF3NP6a:NrXZJ6nicQHNaf8/IXrJaD1T3V6a
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 9 IoCs
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
sigma.male1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Requests accessing notifications (often used to intercept notifications before users become aware).
- Requests enabling of the accessibility settings.
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19B
MD56e0075dcc0b7ac222bea767743b61a33
SHA144b3eaebc17568ca6e120747fef61521137068d9
SHA256d0d1b610858419980e61586967769ed1bf001756aacbd5e00518b3b0eb83a402
SHA5129950d09e464f74889ae85d70e72e57197b8a2713518bb7901b2c7b6e1ae51dc7e53547b2865f0226bfcc3bd5ea530453298512f8ecbc7b790da3339b5e05cf42
-
Filesize
8B
MD5a3467fad3f735fba1af359b4d81d3f10
SHA17e7056d1d8074c762ed80ed874d82b487642b96b
SHA256a869e03fd72f426107032a8868822c58d7123195fbf35b836c39c11403389c2f
SHA5128dd2a36b3d2c00f72f7869e9905d722e6f452e75a74ccd6014a54096f88c3ecd00aae0a9849031dd6de83b5709d22767fd593dd3a41102b83c005064a59eb630