Analysis

  • max time kernel
    48s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    16/10/2024, 22:32

General

  • Target
    90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4.apk
  • Size 4.5MB
  • Sample241016-2f46dszflq
  • SHA256 90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.rhmsoft.codeund9013
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5248

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        20241016223229868.log

        • Path /data/data/com.rhmsoft.codeund9013/logs/20241016223229868.log
        • Size 20KB
        • SHA256 5f6cbf8d591013f685ac4eb7cdd5adf2ffd46c0f86696ad77560d082a5edfcad
        • MD5 SHA1 SHA512 SSDEEP

        20241016223229874.log

        • Path /data/data/com.rhmsoft.codeund9013/logs/20241016223229874.log
        • Size 33KB
        • SHA256 0f876c37d49e0c5a4a90578e2815d2e1a502e8e8fa4ae29400e6c3fae2983500
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb

        • Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 91026648d4abab80ebd079950a7ce20eeef94030344654c821f16592b3da194e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e68372a59380a0f9e81a362ca553088c06000045762c08cdb1c752da83c411ff
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 dc816b5cec4b564f0dc083ac43a3550d3db0e770dbd4d084ab5f681285c5ebf7
        • MD5 SHA1 SHA512 SSDEEP