aa1992af1b06dd5477e051ddc2fba41abf72dcd347a1ffe64ce2924e8350cf77

General

Target
aa1992af1b06dd5477e051ddc2fba41abf72dcd347a1ffe64ce2924e8350cf77.apk
Size 4.5MB
Sample241105-2nwtzssqdk
SHA256 aa1992af1b06dd5477e051ddc2fba41abf72dcd347a1ffe64ce2924e8350cf77
MD5 59707ba965cd6bdc5795d8675fc61f86
SHA1 231f991ebc3b2f1625fa0c5ce0f394dd22517d12
SHA512 46316fd3eb7d046fe43827cbb69111d51983bf01866126438becf791437f481cb73e8d378b6fe03c1663956eacc6e304e79e5452b78533e12e9035da8014df57
SSDEEP 98304:2ut/WouaFBLLkW4xRl2G1hO6ngEzTYOmCTkbzSpce8uO:22mCQl5lTH/g/Spce8z
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.bbmokok.appnp

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbmokok.appnp

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.bbmokok.appnp

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.bbmokok.appnp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.bbmokok.appnp

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.bbmokok.appnp

com.bbmokok.appnp
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4926

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

Process Discovery

1

T1424

System Information Discovery

2

T1426

System Network Configuration Discovery

1

T1422

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

debug.conf

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/debug.conf
Size 101B
SHA256 f1d0172dc95605058c32b92131ad5b7a00e790091ad2b04b620294607a528552
MD5 08be76c5f0a4beceb5ac1a190401936f
SHA1 7ff1a3e144abaa931478b1a6fdcb470778e1803d
SHA512 9c60afa832f207869b0c53b8ed9c85057ee58bbb412924c1a1a4112b1969dc701c6dbe60eeed99144171579bb461804a46aea057c0002cdc5c352e2149c846e8
MD5 SHA1 SHA512

Submit Download

download_upload

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/download_upload
Size 84B
SHA256 3a7ef19114f5ef390f70e6da0d46fa4d6491db6901795cd60cb1c9c37d904caa
MD5 b07589271509dea1ea35230967489778
SHA1 87d0db8180aa45e53491babd3692ce75d77cde8f
SHA512 eca07715adc45010537017c834849b5c1a16c9de4a09379ddd375bc51f5e2692b2df96500bb040e8cc49a31929baca7ced6b90a4b8bd3d88b567b73c3a0a179f
MD5 SHA1 SHA512

Submit Download

download_upload

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/download_upload
Size 84B
SHA256 9b6eb25bcd63c8879b5caa43c6e36a478820ea250f3f66d64d98abbfffd49f65
MD5 0bfeb891d2e477adb30fff96a495b8f5
SHA1 19d3d216ea47e19b7600dd479c42a5475768b1f0
SHA512 1b75b27f2550f49e45366c12b9556286c651b3f46e1778277ef2581b3f921f1e15fa6dcde1c9ad7c8f46f5252ae0001a265c17acff8049a47009a6dbca7021f4
MD5 SHA1 SHA512

Submit Download

download_upload

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/download_upload
Size 56B
SHA256 b70310451c81edbcb870e2f2eb5672ef3230a949eca01181d4069a4455e7a176
MD5 bef8f44c29b017e8c49f71e583c9fe79
SHA1 2ce4ccf9b7ed98ff56e3b74e87e0c1c3b390b36a
SHA512 5634b5e4ed2518bf0ad4afd39a57955ff371f2e695af68b209e712cbde68ffa0f6a457dc8cea8729b4b4c044963a29abe1e0cd302619e8ac89c2e411366b6e63
MD5 SHA1 SHA512

Submit Download

download_upload

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/download_upload
Size 56B
SHA256 4d80f5f563aaa4ce8b5cfe90f50e8e7219fe07b016ea640d27a530ac7ca53961
MD5 ef97debe508d4045aa058496113bdd3a
SHA1 455c90a471585fd773f4652df6711257707f0d07
SHA512 e9e82ca6987291ebb993ab281a70ad2ed605c98eb171f96c2517750c1100c38a79d2290d079f10f618999a457282a113b3a32da080f08733283bad4ff90b771e
MD5 SHA1 SHA512

Submit Download

download_upload

Path /data/data/com.bbmokok.appnp/app_tbs_64/core_private/download_upload
Size 84B
SHA256 05f44f1a65025cd96c1aa76fb988f4398d440be2251e51d6ab56b0419ce05841
MD5 01322e2997406f8be0885fc374035463
SHA1 e166f27f625cbcb871fdee6a0ef343bad2a827bd
SHA512 25725c9cf51ea1f69466eaa21225dd7e6eee4731d876cf9700d0e7f8040311129fde5b88f24700dcf3806dcc0bd3c4d2286062f1affbe7a984934b9870a80f95
MD5 SHA1 SHA512

Submit Download

tbslog.txt

Path /storage/emulated/0/Android/data/com.bbmokok.appnp/files/tbslog/tbslog.txt
Size 9KB
SHA256 a1e94e97521da9ba6aa3515b5f0409f2f6fa7e5adf82b6e68cb2b53013949e97
MD5 33058c20a74ce60de6db11ac5fa4c08d
SHA1 3374cca28d1972dd2fa7d3bf7967aa800123e25e
SHA512 5e76063f31b4b29e14954bed2125a4b14ca8561986a72a2db81bd71380794eefd6396286d147c04f656ce0a87c5910cc69f0227a6b2198e219dfb0a935272dcc
SSDEEP 192:/cvGhR31YI0MLEqAYfW0YvIo2oN4LUi3WehR2P0FYuY5YT:d8F2/i4LNzos
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads