33b59cb04a227fc9ff532be9558ee53dd4cd298084c86d47ef002cab09012518

Analysis

max time kernel
13s
max time network
154s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
17/10/2024, 12:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyBro.apk
Size 1.7MB
Sample241017-pvsdxsxfla
SHA256 2e0618ed2f50e9b467fd0fe14a9bdcbfe2195f3cf5608cf875f76f268112fc27
MD5 9996e4353c3b653663f05e0d63777cb2
SHA1 8529bceb701bdee6c75ae4cdfb41326f7db77731
SHA512 aa13b31484732da296af8d49d3f180d2a94e49e14fdecfd9186965c6e1e516d10e769bc8a9677ac41a6b2956b243ebc867d8ca7f9be47f80f6f73a3e94265d95
SSDEEP 24576:XAQ9zbmd9oi38AYz54rPOaW0D7LG0ewFan0GEn8oI4QPcplFrrsPQm9R:N9fmd9oi38LzMPOm/LXFAoqPcplVsbb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.fire.browser/app_ttmp/t.jar	4969	com.fire.browser

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.fire.browser

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fire.browser

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fire.browser

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fire.browser

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fire.browser

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.fire.browser

com.fire.browser
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4969

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

t.jar

Path /data/data/com.fire.browser/app_ttmp/t.jar
Size 204KB
SHA256 f6d61651b9d98903a4f98527c8a9b29eeba0669b5863d318dfb1c136a251522a
MD5 ced97d7f67335f8cc79951ad24a7afb1
SHA1 f90489478ae0908c508fdcfd11c7a423fb52705f
SHA512 b15e5641abaafee45b3aa4b0d7967e6590167c920fa7104dee896ec66633b2bafcb378886af0df68536f4b7d2fd1d1387889d7f1ec779dbd00b19bdfe1c62848
SSDEEP 6144:s4TIsts5T85gUQstLzttU1h9M3w4jigs6B:6scoFNEPIwMs6B
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db

Path /data/data/com.fire.browser/databases/bookmarks.db
Size 20KB
SHA256 a9f18d67008072a68276ebedaf1b8d3d7eb1c52c1281c0a8703c7b2d5af186b5
MD5 dc64a7c47ec3e28b53aeea6b33e92312
SHA1 d8f7c3b72dd3c322ea4f9df447acca62b60f8889
SHA512 843432a59690d9f00f52d9e88099529cca9ac935211b03fdca45d6b25af70201548397d69af7f351014850ab65d3f52f447916fea7d775a8bf8e4e75fb0dfb9d
SSDEEP 12:TLmROyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbAVOwG:TLwT7EWozOHOvt0GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/data/com.fire.browser/databases/bookmarks.db-journal
Size 512B
SHA256 828cd8c2b32b09237011103baec6f0be854c808af990824a33ef9b98bb6e7aa0
MD5 f953255ae735e301806a388185e3f32f
SHA1 bda7c50ab0fd1e72f6684388f4605eaac58b3c63
SHA512 8905d0c31a009dcf3c61fdefe1752a852f2209c36ad657ae7d2311ca2ea280abe449588418c7895c70793ecdbc67ab5b912f6361f4088d8d0539794dbd489ae9
MD5 SHA1 SHA512

Submit Download

bookmarks.db-journal

Path /data/data/com.fire.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 782a43b4b29677e9afee33a0424ea5c9f7cf2b6b8cd3bbfd5eb8c6976b0956d0
MD5 055de0b8f5d4367f8cb729747c0e76c4
SHA1 b21c7f628a97c96dfb7ee0447733b3ba4443a58a
SHA512 47e3163f2d87c70f75da28e5f8c6af07d96c5991cf6fc6e0df1afc2c6576b38de7a9c30d2aae139343720bd92ec89dcc00980a6d82de017ef8ab9f8abbe25484
SSDEEP 6:7+/l99V/SFn1Dng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKm//:7+tN2qLiuWdwRmBEyPbX3
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/data/com.fire.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 8007b3e2378ca836cd7a9cb08b4e44719d11185fa88e732b9f0adb04a534dba1
MD5 b53935581e13a4e21dbad05295792f77
SHA1 9b940b4037b58ebba7138bfaa27c00b8092ac9ac
SHA512 60fc8e606ca3214359bd2c83bfbd31aa6bb6b6505d5719259fd265059b81bbea3840378bc7079fe7d1b395ba196f254ec95a24abfb80e2f83c57322b08bdb7a6
SSDEEP 6:7+/l9fnlSFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKmlnkt/fn:7+t90BqLJdTRmBEyPbxSf
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db

Path /data/data/com.fire.browser/databases/download.db
Size 20KB
SHA256 5748bb1aee360c42d14b58da022b9a7c017a663eb55eea7f666fef2194dd120c
MD5 333410bf61d7b734d7304c8eb9dc8208
SHA1 f8b1e679deba0badf0bd023ebd0e743bd779df25
SHA512 0e53769e63e06ee4f69c8815dcd8dd70126d67fbcd99a4ac0021f7a18357b3d823ed58bb4c2f3c1fb321fff6cf0aba725b9ae40fd3d859c90d871cc6d5a91d3e
SSDEEP 12:TLyKEu3iOa/JrxDhWfyjRSL7/NI39TGRmBEyPbAVOw:TLy9u3bMaWyFIfGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/data/com.fire.browser/databases/download.db-journal
Size 512B
SHA256 e38afe3b6815cbca6d0680ee55c9375b59e23d3f7ad64027b7ac5e1f8587ddb4
MD5 edcc4814df42e50bd15a586eca9dbc09
SHA1 599a81988cbb6b45852fa8ebb920a4273b22582d
SHA512 40a3c0ba6678585a029c989a8cc0459331a6fc21cf7033844f94c2113cc77661e9178763e6cbf0c30548df67d04b7f3eaf8010c55d19fa3586045515ed7b4d1c
MD5 SHA1 SHA512

Submit Download

download.db-journal

Path /data/data/com.fire.browser/databases/download.db-journal
Size 8KB
SHA256 e46b684b8f4a7c2eb7bdafea28dd3b3cf9a5ec295bcac172e21c1562ba2090e4
MD5 4e0eebb6f6bf7285342f83809e159155
SHA1 d36943a1fe942e1a324fb6ca8ba58e356239a577
SHA512 03e0b973dcdcd336bfde777ccf46385d0440c1391124d244819a85b708f30af14da827c063e28560fb30ef733be58bab4cbc88cbfd37192ec3186f24097459a5
SSDEEP 6:7+/l9Qn1vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKc:7+tYqLiuWdwRmBEyPbz
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/data/com.fire.browser/databases/download.db-journal
Size 8KB
SHA256 ac11aa825a40fcf0cd3156034eb7cad4150cd979b036b2abe0f2abd11a15a941
MD5 2ed248fa77fd233b227949a3a7b08781
SHA1 ca4717b68ebd4f066d0f0a8633515e502ade2c93
SHA512 84bf94b294182a7c2fca693690e2e0ccb48dac2051bda66419b01318a5090376177f816cd71c210036f9fa40471d27e03cbdf958873c4de951f478872441346a
SSDEEP 6:7+/l9XPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK3l9M/ax:7+tVqLJdTRmBEyPbzc
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/data/com.fire.browser/databases/download.db-journal
Size 4KB
SHA256 66410d52a52599451c07a80c2baf3e68770933099ea3ec4b05f973c9481d0cae
MD5 7f2df50c014a4d0b488f3ffaf7632fa1
SHA1 8297a69f361c83e0a1f437df84c37c206d19078f
SHA512 af0f14a3022402f4c036c8520b4a344aad5ee86fbc1d115defa2c8550a4cb379bda5d9617497fd83816fce150015041b09e763980ae11f76a0de3f318fbc3833
SSDEEP 12:7+tjnqLZ43iOa/JrxDhWfyjRSL7/NI39TGRmBEyPbTN:7+tTqL63bMaWyFIfGSR
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db

Path /data/data/com.fire.browser/databases/weave.db
Size 20KB
SHA256 3a95a8bb724881a523a2e2ac15f15593ccb8088904c96e655a6915bed5503023
MD5 13fa423a11adcbb4f1e83d4ba9a4dfc6
SHA1 45760b64924c0bee300fb15dd29520546453adcb
SHA512 883521a20ddfdf308e7a09b9e9fc6a0c751d53748d17cfe67e7d5ea3b7f1d45fea6dd1085ec505d0f903674ea07d7107258d409534c723778ec69cd09b8a8be2
SSDEEP 12:TLmnyNTSFby+0qznu7AurAuC59CB5PbcaGRmBEyPbAVOwG:TLfs0qK7L30CMadGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/data/com.fire.browser/databases/weave.db-journal
Size 512B
SHA256 615adc30c82fef884050fda6f50c4972752c7f78051e3339bd5b79bd3da419cf
MD5 defea341404492de189d60a3c5715f3b
SHA1 9de9fa5b8f68d6893013f8a3ea7fdfd1f301745d
SHA512 426ac28252fbfd5acf1d734f321d7357138e19f1d44f79f301ea48b158ca81da9888cd844665c81d10f88742c0f306d798bf453c5d9cd629c101374345f27edb
MD5 SHA1 SHA512

Submit Download

weave.db-journal

Path /data/data/com.fire.browser/databases/weave.db-journal
Size 8KB
SHA256 370be94dfc5f7fa7e684a92b6edd505753b0dc98c209531becb84f2762a5f2e2
MD5 b1c8e2dce2e2973241238f5eee6fc458
SHA1 8b850620f0582f1f075199bcc88caef0ea0bb772
SHA512 cd8f482aef8ce02fe1a23d05cece0b7fea8c1d7e42444b9cc6422f48e4c327fa6e2bb0a5662ea99e70759d4bebb8be4f3c946f786cb644184deedb736d5021a8
SSDEEP 6:7+/l97n1ATpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKqK:7+tk9qLiuWdwRmBEyPbbK
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/data/com.fire.browser/databases/weave.db-journal
Size 8KB
SHA256 ff0186d4cfcabb0687194e80e0f5596bbbc7f959c8a8aee96a01ab8975233d7d
MD5 e56ce2b873b6c5cba569df361aace290
SHA1 8ed282c7283b3af854058e2ead7cbfa2fc7184de
SHA512 ea924187a070ecdece706871402254545700e14197c9eccab1ae00dccd998ef097d1922f243daaa1d529a81b0646cbe3e60e349d663fb6981f4cb4873f7f485a
SSDEEP 6:7+/l9sl4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKyCK//Un:7+tJqLJdTRmBEyPbDjU
MD5 SHA1 SHA512 SSDEEP

Submit Download

homepage.html

Path /data/data/com.fire.browser/files/homepage.html
Size 2KB
SHA256 193e20d0dcd3b2e3a02bbead8a6581e09e7b3f7c6b7613ad28e3e65909f36c70
MD5 aac7d9154602a9be5122d9ebbe066c9f
SHA1 900b8830bc6da60763327d49ef05792472f60f33
SHA512 ad6275b4a2ebf6cb0c6e3f1e62e489901cfa4c4e5adc1b2ba1beebb57357a81d871f63f7678d93904e1c8b6221da15ae6deb79dd3d48e3d78e62369feb2f951e
MD5 SHA1 SHA512

Submit Download

t.jar

Path /data/user/0/com.fire.browser/app_ttmp/t.jar
Size 430KB
SHA256 f2fc43ab889a884238f93766693fe57050457252b0b4aef63330b1b672a3ed69
MD5 a2008b3fdabd5bbe056b6b152d07d4df
SHA1 ba1c50523db4390d811653734cb8cf93a2afc008
SHA512 adb1f1ff2ad53df14b86ffa000ff744e52e2dedf39eb3f0cf2969fe56635a8dfb13fb7be7bbf265d7646baf104d1bbf902968682aef55ab971dd40fa180733e7
SSDEEP 12288:HBsV4ORw7I9Wz7rX58S+t16nkFP6SWaNElHRr:hst2Z
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads