1cc27de926e7a6220cfa55b1dad7ddaac6ec6041cc6679ca69b9737906b313b1

Analysis

max time kernel
73s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
16/10/2024, 22:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1cc27de926e7a6220cfa55b1dad7ddaac6ec6041cc6679ca69b9737906b313b1.apk
Size 4.3MB
Sample241016-2lb2sszhkm
SHA256 1cc27de926e7a6220cfa55b1dad7ddaac6ec6041cc6679ca69b9737906b313b1
MD5 525da76dd6b382464347697f0c27662d
SHA1 d4af40ed3332a741d65cd4ea318e11307bf615b4
SHA512 7f61e5368a8b89186c3cf3f10ccb20eb8e8d7c5cba12a47400db790129ca0eb848bbf52fc0a0d07f8919a42df18d2b7b1cc1f6960cb4806a796fb561eebf0138
SSDEEP 98304:54+JYek9seHP82A+0Lln3preqxroKL3Xr13Klp6Mm5+pmpRIsBbZa:5iekCeva+AlnZrzMYtqaIpORIOU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.rhmsoft.codeund9015

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rhmsoft.codeund9015

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rhmsoft.codeund9015

com.rhmsoft.codeund9015
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4736

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20241016223951554.log

Path /data/data/com.rhmsoft.codeund9015/logs/20241016223951554.log
Size 20KB
SHA256 5fd20571504ac2f2b9f19f5b71d62670e4ff4b3e48c68595484c9b4c7cc180a5
MD5 c628c6f39f6752aa7ff003cd506d111f
SHA1 a22359c02188b7f9ecf65bf60a3be9974b0293ac
SHA512 cd3aba5b04266960d878d69f503ca42bd7a0be0694772bea1dcb5ad12bebf648547128341be385ae8da5ed1c3d62aa7f84e92258ac438de98069f791e313e263
SSDEEP 192:h3MbOSlF/Wbrlc1QxcBCDNu04cEECLkDW9Da9Iy+wEDAzkbExW6UEcsdeUDB6czu:h3IOSjElqlFlvYlPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.rhmsoft.codeund9015/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.rhmsoft.codeund9015/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 c8b41ec2a6158f3f36f1a5030bae720681e644d1e4461bc4ed7dc6eeb287abfd
MD5 1973b762d7e6df6e6748fbe0d8e133d6
SHA1 21decf97dde3cf86d630b9631ea81c9ef2e87773
SHA512 2d79caa508fbf4558d3f00ea496cc6e868d7a9edcae715dee09f645adb02f6cf529ded2cbff28996422f3e2df8d32f377c52732d3edad6c2584704d18d289808
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.rhmsoft.codeund9015/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeund9015/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 bd2e26e749b9288cdb2de4832bb417f9172440e714253b70f2793b1e9a35cbfc
MD5 82398945d8d607523342031b57ad5bd9
SHA1 3efe9e40644767f78fe4438165d12eadf6ad03fa
SHA512 55d34f9f141b7888e67309eb115c9064f9b535a9838ddb00e5d26dcd3b5ad1559bd028b0ca4af94fe02feefef684f5b2ed7dfe5d585cd465bfe4da1a5a462648
SSDEEP 6:KMRIOHsVZJ9FZde/kPlOERX4PBX4ogLugMBX4suuK+/W2MF2hnWOw2:KjjXzdeWRmBEyPbP/6UYOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeund9015/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 083f11776dacd5f39576ae61cd30155382a409d22fc0291281d54e60931edf8c
MD5 97e689f920ecfa59a323b6bccaa31f06
SHA1 e5518377acbf49d6d4004747bd3ef153f0af3d83
SHA512 9926c5d0712320c1c44214cdbcb3c44d3ad9b54feba28a6016ead1f61ac744a3922d67ef4b10b84ae661defe0550b28a02a079930b242a93c5178338307b853b
SSDEEP 96:+f6+hdjnHtDRMpf8UzS6+BD8q0ExP5/uHZ:+XdjnHt9Mpf8UzS6+BD8q0E55GHZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads