5b519abd0a9b29da3007fe0d3e943eaae1d8bb885fd05429e1c113d2eca25c72

Analysis

max time kernel
19s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20/10/2024, 03:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Superuser.apk
Size 823KB
Sample241020-d2p2laycpk
SHA256 8135f47bab91a26adfd563ed4dd22e25f454dfae02a076b6f3cd05604f2068a8
MD5 65bd72996c68f289c5fa0b81f0874127
SHA1 ee246d6e91017768e82b2d17e22e4044e4b7da2f
SHA512 713468d5bce2d42d7d914077a4edc9e2b6d5fef0b657dce302750bb99b4dee3b0859c7722b4ad5b4dc125680f6690c9ee9ecd6baae1bdd21fe927a155765305a
SSDEEP 12288:vwox9LddQ050PS59VJo1yOjLLfLHNm41awK4OhioC08pYAj4X5yXDn:Iox9XKyOL/tiXoDn
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.noshufou.android.su

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.noshufou.android.su

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.noshufou.android.su

com.noshufou.android.su
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4492

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

su.db

Path /data/user/0/com.noshufou.android.su/databases/su.db
Size 28KB
SHA256 9515a96e805886c922c6ca874e822ea74d838a6425bbc2194250561df1f235dd
MD5 f156df0db6b5f797168a7ed76009f762
SHA1 7c140b0d7fd520862e69828c1d459f1b31efb5a9
SHA512 632f4e1fc4545eab24d291c0cf2e9f4b48560b2497cb74abb9d58597af74e36a3ca358460d0d912bdd1879a580f396241f82b515404ea41f8d4c041d5d06109b
SSDEEP 12:TLCcqVV97NeWlTSF7V9wdRLY9qKxJUng/vRmBEyPbGtOwIQ:TLCcqB7NRlgGwq8+g/EGSiIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

su.db-journal

Path /data/user/0/com.noshufou.android.su/databases/su.db-journal
Size 512B
SHA256 f4f54db8ac910d4fbbc97fa4f4c09bd2ef944e454e319a6d26e5a418ab9638c0
MD5 1fa335f0a1ebf9544613f81d5c1916ec
SHA1 bfed584ca610cc328ad83dd44b564181128d7382
SHA512 0a54c8ff4dae35e002b33717b711025cccc911d2933163b5333d7b46cffc8acddeecd4243567c944d088b426149dd778a4b6507e57bc3c4a34f0f8aa8c81ee20
MD5 SHA1 SHA512

Submit Download

su.db-journal

Path /data/user/0/com.noshufou.android.su/databases/su.db-journal
Size 8KB
SHA256 1dc43dd383bd52221aa206432fdd8316a7a7cf5d76a1921e995836ca58bb350f
MD5 2301b556c3b34d5182f26f2f49df1de9
SHA1 9e8e5888972341d01f9adfe370b0caeaca16cd8f
SHA512 39f21f62baa625849a12a83c92ad41207f81f5da4d44463b32476a3126eb1a277bd928721403b5d911435950c767ba21c78319c235a2c8ceb2af23ff0f335901
SSDEEP 6:7+/l9JQ8Fn1Ahg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK22n:7+tEqLiuWdYRmBEyPbE
MD5 SHA1 SHA512 SSDEEP

Submit Download

su.db-journal

Path /data/user/0/com.noshufou.android.su/databases/su.db-journal
Size 8KB
SHA256 4558599d17408bb7b4edd7ca03586323f13e7653e5a7bd1cb78fb5d74a2df37d
MD5 5500e38c6b768ea56bea04de3b8e5aec
SHA1 0f80c22a290491ddab5c5303c0acb47dd8f2d8b2
SHA512 04a817586cd8e8e2ba3635b9600bc1a243be04770f3c647cd767ab9ffdbe23fd4ca18a17d6cd4b9eba68102448e651ff0cad2e28dfd7f9f6426c47df21f38631
SSDEEP 6:7+/l9CwPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKmtaM/0:7+tIIqLJdeWRmBEyPbXtas0
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads