cda86c6f084905064a85f1125f7d8309451b2c52c6c4e7e785d35b80d56995ff

Analysis

max time kernel
24s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
08/11/2024, 13:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
144f8016369b3b59f48651e3e3b0a55d.apk
Size 2.8MB
Sample241108-qlw67atarn
SHA256 cda86c6f084905064a85f1125f7d8309451b2c52c6c4e7e785d35b80d56995ff
MD5 144f8016369b3b59f48651e3e3b0a55d
SHA1 61fe9fbc636d31b543bab1ad7c9c0e275966f398
SHA512 2fe1f1c66b82e846903f93d9b208de10e731ead3c491512a2805594966f4bf8b5bfef761e63d8485e3c69d142a5641bc4c0a453cc321e3225146fb842fb0321f
SSDEEP 49152:i77jtAMhapZAwqA9YvkEraHQu8w5ldxYa1xo1YDubEjwDTKpi9ARia4gFZ3GoC:+RA+IZAi9Y8Erawub5l0a1W1YDubEjw1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.ico.ickath

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ico.ickath

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ico.ickath

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ico.ickath

com.ico.ickath
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4459

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.ico.ickath/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 2ece45c95e52bd9d9cf4191a65d72de7c937287f4ffcddefdee36b94b4f47f60
MD5 6df934ec1fc875b3525281a747a7bd4f
SHA1 bbb4770673380b225938cd46d6b0a281e1b7fbee
SHA512 4384cff7f9c2a8ebdc2092fe09f29ea9e13363fe5de5ce8eb62bb64c3ee1bebd0ef6dd827196dfe7493a0200e8424e5dd6879d0f65bbcba36c9760cf803c79da
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.ico.ickath/primary.prof
Size 1KB
SHA256 b1475084f7e71f8cb69355f28b1a1e2af8fe23dd878649607194ce130c0d2ed9
MD5 6a19774d365d1ce49a3e5099067e574b
SHA1 c350bdb6ad839ce4ee3f27e1af95f22f76f7e9e8
SHA512 0d58a2fc604ff2c0773e5879f77f5ad49a4cbd651a5f7b6e8ffeba32cf03fa37027393aa0a4cfd7d6fe018742868c7d2798ce24c590db46e829e429dd8afcd4e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads