Analysis
-
max time kernel
89s -
max time network
154s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
30-09-2024 22:04
Static task
static1
Behavioral task
behavioral1
Sample
a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697.apk
-
Size
1.7MB
-
MD5
86e3a5f53a63adb57ac737ed0c72fd1f
-
SHA1
26cb72ca0d43f4e59b20636d1fc9f78457c005d6
-
SHA256
a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
-
SHA512
184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
-
SSDEEP
49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8B
MD517ee41673ebf19421afa6a8b0531e628
SHA17d3267d4c1cdc2e156d7dbab6e2ebf819b44dae6
SHA256c19835b8400255cb8d6637c3c4000fcf1b8674b3a9c764b04d1bea4f0de9783d
SHA512437b38860d3ff6f5f11ed2816b7908811b562f0dddc9ed0cac5e1674d9e6fd416845717be188def50299903f5330388cf759c6844bf3779f143486c6d24df233
-
Filesize
1KB
MD52a47fd140c1c9b76dfc3bcfca3767773
SHA13f9e771a838941b23479bd1abdde85c06ccb5ddf
SHA256c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
SHA512d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5