cf2c392c8d07401fe097e441f70cc38a5b70349e7ee4a0a02dff7b56460f4a2d

Analysis

max time kernel
144s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
16/10/2024, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cf2c392c8d07401fe097e441f70cc38a5b70349e7ee4a0a02dff7b56460f4a2d.apk
Size 4.8MB
Sample241016-2b8m1swerb
SHA256 cf2c392c8d07401fe097e441f70cc38a5b70349e7ee4a0a02dff7b56460f4a2d
MD5 774950dcd7507df3ae8dfb6c3e73cbc5
SHA1 a53223978201813d97cf2ed6a303c2389855c7b7
SHA512 c5864f5c48e3d2e58e27882121ac93ffecdfc537e3747eddab515b2c7b95b7b1dab6d94e9cd70798f6bfdc06215ae7d2362f0d4efbdbc3d58c92b0cb41c80d19
SSDEEP 98304:mJgZDyyTitO8Xj69R2ZUgIG2qBTHQMXAHk4mrwj8kvxUeWRfId2ZrYuO:mJgVQOhIZPrBTwcA00HvxUno
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	mobi.html.view.vsnp12

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	mobi.html.view.vsnp12

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	mobi.html.view.vsnp12

mobi.html.view.vsnp12
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4712

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20241016222542429.log

Path /data/data/mobi.html.view.vsnp12/logs/20241016222542429.log
Size 20KB
SHA256 057301c7a3482d6eaf611f789487e9d842a111cb16ebcdca814929281e011a48
MD5 9c188b395a14b69b2b119c38311e5edc
SHA1 246fa7109f6f81c1178f83cc88c149cc7a62b4fd
SHA512 36c21429a26836fc662014df1e00d59eba3b84b1878db26e67a5e868969019100a7daaec127a23aa1d19c83a694cbd8047e83484e3f3c268dfd349715906209f
SSDEEP 192:g34QyC6tFFvazNfRioorCDgTBccncgVVD5iD54cSTn8DILM8SvMmUEBomaEDa9fF:g38C6bIep
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/mobi.html.view.vsnp12/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/mobi.html.view.vsnp12/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 efd9327445e2b32d28c53e91122a8df19dddd37ad8a35cc64fac049169e882a2
MD5 0ee87155ad3691dcaecd8203a22a6258
SHA1 cc4037bf46b43c81d5d45207402c9429bab8be06
SHA512 26d52a5570de0f7ecfafa6dc78d69b5dcac8069eb216546dad5f81105ff20a9f1877edf7a8d261e3a62aa675026c33adaece8b287c8413a415aa3ff2c5b542dc
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/mobi.html.view.vsnp12/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/mobi.html.view.vsnp12/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 01cda3ea109267c38af8bb35db53cf83ce842fe42a4ff7dfcc3392c7ca50ad7a
MD5 7a56b372e19fca68f45271d5ba165c5b
SHA1 a5a079e965d18e4ddfabd880e72f6ef0ca263978
SHA512 1774ca34a8df634cda965fb8e1c0e2ab11f8990137c56455c4bd30cc6268b27f1624389a5fb04a8204eee53a8217293b8c2b4448b60ae3bbb34b2a780aac8659
SSDEEP 6:KeIa+hDg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/hxUrolhDN/+Ow2:Kva+hDqzdeWRmBEyPbP/hOUhR+Ow2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/mobi.html.view.vsnp12/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 62598d270ef61c3554cbdaf56130356769c2455de6a53af8902d8a859f3091fb
MD5 ebdd0a63433dc45346a70963314087e5
SHA1 41547ef55dd4caefc103630a03c7749487c88a12
SHA512 305ddaa6c69c591cf8347107ada1a698cb7b4269b451ace0651701cb37d32cc992913c2ebfc0d9e0f92f54ea775f069ca40c43f01b67515d50c5a694eb4d4c2d
SSDEEP 96:g6+hdjnHtDRMpf8UzS6+BD8q0ExPATuI/:EdjnHt9Mpf8UzS6+BD8q0E5ATb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads