Analysis

  • max time kernel
    53s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    07-11-2024 22:00

General

  • Target

    6bfa4ec31eded318330f12abe8d1675c192264124bc0ed5a475eefe8f2b0ef79.apk

  • Size

    3.7MB

  • MD5

    8d0159701bccd4c63c2098fc05955a4e

  • SHA1

    5de396a555d415c833b575a83e51cbd9d21edfab

  • SHA256

    6bfa4ec31eded318330f12abe8d1675c192264124bc0ed5a475eefe8f2b0ef79

  • SHA512

    671fa73ccab12e6f5ff415d5ac1b66611c9de50ed171d98a7835a0f1facf8b352d271acbfdd367d26ae7dde495f950b27a8f0e52730aa3429fdad712559326a6

  • SSDEEP

    49152:193mKOlV3Rk2ewTnI9cV1zhr2gpLUOC6pW09a1e9XvIeOcgFcypMl+qPBOr7/zNH:ubRx9Tnn7r2gpLUj6Np9XEDXz1w2

Malware Config

Signatures

Processes

  • com.yonoservice.registration
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Makes use of the framework's foreground persistence service
    • Checks CPU information
    • Checks memory information
    PID:4325

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yonoservice.registration/files/profileInstalled

    Filesize

    24B

    MD5

    eb874fdcdd9328f1fe3dd07b25e619c3

    SHA1

    d56260375fc071c9eb6037b1b733b414ea349982

    SHA256

    52e90fb832261ce8f9119812a97bd93c425a48f0dca78af583cae0d81bdb5359

    SHA512

    008264c811609919eda0ab7005b2c6bc78d17a626f24cf2bd3717d8b7ef2d94f07d82b00979f0ab3f4af8897bfc16d1bfbd022b7a020f5d22f26bdc34ef1da02

  • /data/data/com.yonoservice.registration/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    0dd951e37c421d4b76edbb52c2ed5f62

    SHA1

    09e27da512da58adedd8add567801b9bb1e8d1ee

    SHA256

    5361b54d180997db67c2d172221ee6de38d3e7e1be6a834f726fcd1ae88f6afa

    SHA512

    24a7ff62c58e4b22d6e8ade8275998adcf607e5227172782a8e879478eac069120f60d494d1e29b6633300b4dbd89ba90c7747f1caa9e809ed7b11a2a86bb2f5

  • /data/misc/profiles/cur/0/com.yonoservice.registration/primary.prof

    Filesize

    2KB

    MD5

    3f40a3add29c68243ae352b006e6a16a

    SHA1

    05a030a47f897d5b3bbd0bbd5cb9869356a1a358

    SHA256

    e92b3847638d82a6123f739de5568918e4e09cc8e1966084ea086f54e0a7a41d

    SHA512

    7d34b9277407f19d8c79f61272e7c4aed08f8581a28af3f7a41604026441687ca1b5fdbab6bbde43b01190885fd4c69baea5d2e80a25eab5b1310afc27dcab17