Analysis
- max time kernel
45s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20240910-en - resource tags
- submitted
07/11/2024, 22:07
General
- Target 2fc4de21ceb15bcb6ba19e48aec52bc24e17c2fc8c49847147d821b5ac8591ab.apk
- Size 3.4MB
- Sample241107-11ldcasjgr
- SHA256 2fc4de21ceb15bcb6ba19e48aec52bc24e17c2fc8c49847147d821b5ac8591ab
Score
7/10
Malware Config
Signatures
- A potential corporate email address has been identified in the URL: [email protected]
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.divine.smsreceiver1⤵
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Checks CPU information
- Checks memory information