Analysis
-
max time kernel
36s -
max time network
151s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
02-10-2024 22:03
General
-
Target
5b118ea66e77f16ab8dda2e1bda60a6381a3d08a6f81bb90bb1b64232e18e791.apk
-
Size
1.9MB
-
MD5
b8427edb915278660dc66050afe2b8e9
-
SHA1
304b275bd4500342e9193d2ac6993270b8f568d5
-
SHA256
5b118ea66e77f16ab8dda2e1bda60a6381a3d08a6f81bb90bb1b64232e18e791
-
SHA512
56b5338214c22fbc71cecbb729ab69570ed397c9cfed7019fc6abc40c2d0fcad2a5466d9c24ac21de338f4a6ade01e2c463093090a9de26fb150c399d5ca0ed2
-
SSDEEP
49152:2vaeGjeopKIaBgRrDmoIn0puTodgWkd2ofriNvRId:2CeGjFK3oA0pOd2ofriNZQ
Score
7/10
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.example.ngnwin1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information