Analysis
- max time kernel
48s - max time network
151s - platform
android-10_x64 - resource
android-x64-20240910-en - resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system - submitted
16/10/2024, 22:32
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4.apk
Resource
android-x86-arm-20240910-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4.apk
Resource
android-x64-20240910-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4.apk
Resource
android-x64-arm64-20240624-en
3 signatures
150 seconds
General
- Target 90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4.apk
- Size 4.5MB
- Sample241016-2f46dszflq
- SHA256 90061f8342f2650324523030b36d5d7d8a947f5a657844281e3f384ee5fe5be4
- MD5 963c9a41203986177237ceba06b66cf7
- SHA1 12756e5af4e73a44c73486e70bb0d803b074e389
- SHA512 ea7d58544eca959d40f70282d63d24eebee8e0405e0b03399cd9c30a9788b0956c3705af8b1e8ed0e483cddf53ab8034615e1c4a2a0b3e8509f5bda924e9e5f0
- SSDEEP 98304:ZI4o5CeBs+tDumwo9wAtrQSVO78KJfiUfCw0wJWfrSW:ZIaeBXf9wAtUMy6Uelrb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.rhmsoft.codeund9013 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.rhmsoft.codeund9013 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.rhmsoft.codeund9013 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.rhmsoft.codeund9013 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.rhmsoft.codeund9013
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rhmsoft.codeund9013/logs/20241016223229868.log
- Size 20KB
- SHA256 5f6cbf8d591013f685ac4eb7cdd5adf2ffd46c0f86696ad77560d082a5edfcad
- MD5 d674bd8ab84ac0b8517ccb2100e3ef89
- SHA1 d787a1d648e24500c72a6ba8155816e3ad5fe903
- SHA512 1161a922d728494e2a372662af93f2c94b84fb100195ea8c9d79c08034791305fc14dfd2c5d71559add708f368ecf3077084177947d78afc9079b947939cc515
- SSDEEP 192:p3WfaaAoFmrfKr/en5AKLDvowUkqu/8mDhaD8nMsJUkDwDVUMJSqREwYa40DMXKe:p3d3GwCs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.rhmsoft.codeund9013/logs/20241016223229874.log
- Size 33KB
- SHA256 0f876c37d49e0c5a4a90578e2815d2e1a502e8e8fa4ae29400e6c3fae2983500
- MD5 06178ad2b437e80adc22faf77a88c96e
- SHA1 d54b086eacfcdfd1525f7b78d88afe2df30c872b
- SHA512 5acffc172d52fdc4ba5b4c42b81cb6013894d9dab752a0a411d02f7a45eead631b1d3fc50507343cbcf67175746e3bb9dedd9fc0acd61a019a4dfa7a82bde15d
- SSDEEP 768:t0Ch/sWFb30pLJpKR3uxwoxPr119NpjACwTk442NS8MUHYjQB0UoR6TYiP5rCFVe:t0Ch/sWFb30pLJpKR3gwKPr119NpjACc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 91026648d4abab80ebd079950a7ce20eeef94030344654c821f16592b3da194e
- MD5 055718b3747b3491a6b2c1a706cfa7a5
- SHA1 93118d78ef1927f0e677e08673926c5d73803acc
- SHA512 8ba3be4f4ac4977eec2c0c5f5ea074c096d1d8404e2ad54a6a4f121cc5b4dbfebf051764ec3dcab9e7016ddd7d0858a6c89c63e6fec1de6eb1fd11be7c0ca1a0
- MD5 SHA1 SHA512
- Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 e68372a59380a0f9e81a362ca553088c06000045762c08cdb1c752da83c411ff
- MD5 477185b390bf5311b87b3ddb53601283
- SHA1 c232c9176edeb85548893e4b5afc157c070298bc
- SHA512 88dd2f52b9edffec04cd72f393ba719ff513aef12aee25ef7391d47ccec0d5953d9e636d0244a5d9323b139b970f3461fa33df1a18a84ed9296239fe363b4832
- SSDEEP 6:KcS4j/y4pW9FZdrlOERX4PBX4ogLugMBX4suuK+/949aA4xsZbav+gslWZbMHOw2:KcBjpezdTRmBEyPbP/C4ObQslQbiOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 dc816b5cec4b564f0dc083ac43a3550d3db0e770dbd4d084ab5f681285c5ebf7
- MD5 7618179792de588e791d4006970e0880
- SHA1 b1ea8de7163f9a8af4ce26df8ab545191b97bc55
- SHA512 ffab0e918af9cdceda13009c2b27beca38d552a3f410c87bbf41e960b483f2a74cafffa0217430aca2429aa612c70d9942e6c43334814b38ef3616e6548aca43
- SSDEEP 96:26+hdjnHtDRMpf8UzS6+BD8q0ExPVMvY+:WdjnHt9Mpf8UzS6+BD8q0E5Ovh
- MD5 SHA1 SHA512 SSDEEP