7d3dd89d6b6c31b36c756ce6f5954f3ffc724a54166a39462cb061d05d938e36

Analysis

max time kernel
47s
max time network
154s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
06/11/2024, 14:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
33e5f29342a0bc9c6def9e2205368d7e_source.apk
Size 5.0MB
Sample241106-r1efcssepn
SHA256 7d3dd89d6b6c31b36c756ce6f5954f3ffc724a54166a39462cb061d05d938e36
MD5 33e5f29342a0bc9c6def9e2205368d7e
SHA1 d89c4e72489ff09b282c660819418434435d7d59
SHA512 2f66009b8c276e82b79a7ab0d57c0731505b03b2de978dd7aa8b4c274af29a11a72b59d520f444c21be0b443e32849031382780f35b022879653001895db1846
SSDEEP 98304:6eBO6eXz/w1h97eR384z+DLaM0mixlIOKddvWfcKazSoIj3DFT:fO62+4D+Dm3mixl/KddvWfcKeIj3R
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	h7ap.ddsbec.mhtfcqtm

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	h7ap.ddsbec.mhtfcqtm

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	h7ap.ddsbec.mhtfcqtm

h7ap.ddsbec.mhtfcqtm
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4525

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

tbslog.txt (deleted)

Path /storage/emulated/0/Android/data/h7ap.ddsbec.mhtfcqtm/files/tbslog/tbslog.txt (deleted)
Size 3KB
SHA256 877a8b2261dd3a2138464e911149646c172f13e5c7e75275545e4c4f7c577f95
MD5 8cb390f9495e153c37668a1078d53d8e
SHA1 afc561cbca47abed913241c0e29067509028b3a9
SHA512 ed2b0a342600ab6b526254cac3cc3b1fd285901fd9a5ea567b48b8b02e884d31a2767a4c1e2dbf9fd092caa80e03d6b4db75a0f9c4685c6f4700ddae866a80cb
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads