49b5610e0fa6168a1bc961cf6494e9f6f5d313c4cd914fdf6007833e4732fa83

Analysis

max time kernel
139s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
03/10/2024, 22:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

49b5610e0fa6168a1bc961cf6494e9f6f5d313c4cd914fdf6007833e4732fa83.apk
Size

4.4MB
MD5

3fd035447c39dac75b4a94f52b12a7f9
SHA1

0babca3d83c5919996d88d62a744d38c51db3ae5
SHA256

49b5610e0fa6168a1bc961cf6494e9f6f5d313c4cd914fdf6007833e4732fa83
SHA512

81cdeda96048054039e3f1c1edb19be03157eb38a64fa3426802938ab3f7011227152c4ce4cd91cbe16fb7704c100f0c45ec29835aef70ce708cff962ba4b7ca
SSDEEP

98304:VEgPouqiF7Pqe0G2KNJIwaALKSmOwnzuKZWMYrSU:VErBepFaAXdwZOrt

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.rhmsoft.codeund9013

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rhmsoft.codeund9013

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rhmsoft.codeund9013

com.rhmsoft.codeund9013
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4506

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.rhmsoft.codeund9013/logs/20241003221001327.log

Filesize
33KB

MD5
577b7a8c2857122e2aa545543bcf3619

SHA1
d181583293e2296ceb6ca2c76f74e549c8925acf

SHA256
7f53052d36b30b56aef05546135100e8519bef9d4bf1b7ee4bd7c54aae9d7809

SHA512
822c5a26a74266f03f5e410c6aa4199953f23752f4ac4270b81bada4819540d8ddb6df5be33ff781f7cda01787533c2ce6fee67c4ccc71088ed33722b3ea2316

Download Submit
/data/data/com.rhmsoft.codeund9013/logs/20241003221001332.log

Filesize
20KB

MD5
eada712cc0a0f0ef27e32b2c7b46ac66

SHA1
09d6e8bcdbe9e6172b7cc50f99f78307bcdf2940

SHA256
8974d550d31322a48f1e2f3713973e86c21115a8ab6b90a42baea83511ce2ff0

SHA512
d6b6e7c84b59f2fd2f6559e9c99d2f3d2a8c7bdeb224e535c23db43e365171ecebd010579ffd371f280bb797ec13e5b6491bbc910751260e5beea08ebeaa70b3

Download Submit
/data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
0bb23fa609a08d531a54901fd825d110

SHA1
3fafc8255e34dc2abea70708ad0061c7de53c189

SHA256
d5cde5ee1f8760fe316afb2561d580ab136fa7ea40d59f33901086e88cfc6b77

SHA512
913faf0c6e16dcd314357df37ada50a66345852683bdeaea2a8b507b1433afb5e894e7059962b86e802e8b55b3e27c4f5b5915777e61b8804a2907f988dcfb35

Download Submit
/data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
19fcfe9e14ee8edbd93c554633edc4a0

SHA1
b34570105b2d43b990a61737b8d8897a29fc19bc

SHA256
5009d5bc97b3a9d2184a958704e4364fa1d586d6bfd9435b7a59f458ab458475

SHA512
023052ef9ae0fa7c61f8ceb576d054911a25fc93ed9438ab013841ede2b3d38aa6861c2be7a073b8d8c4722a31d4314ad060abeffab2777c9b98d463de33dce0

Download Submit
/data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
f1551c7c9f3f73cd2fdeb0053a73333b

SHA1
3db95c5c3c1d9d7a61c657cf39451cc0f8cc889f

SHA256
b0b161cbf4ef626c28c850b297d6654afa0bf7c84d0c31d22fe13e6bbb07b5d2

SHA512
11174c963afda640014efea1e38398a4fdfdcd31329f6ac84648e445e0ff0d77d609c5068d9489b5113c8da78da5987f335caf14326da23cb5c178a52a26a4ec

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads