Analysis

  • max time kernel
    54s
  • max time network
    154s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    09-11-2024 23:10

General

  • Target

    acabb6b9cdd2549dae64f7cc9f0e4a402fdaf505958c11bec721eb2f0c3e3ac0.apk

  • Size

    3.7MB

  • MD5

    cae1387f541b5192eb0e1b270337dc2a

  • SHA1

    a686b9c9975ebf751c7e8766c3bdc1b87ba361b8

  • SHA256

    acabb6b9cdd2549dae64f7cc9f0e4a402fdaf505958c11bec721eb2f0c3e3ac0

  • SHA512

    0ddfed868c70dd2a221b932545dd2df3dfd485999f8e7c3b7a676847183161dfc31a08fe68b25fa1b9fe07dc8bc547b4b9e9c61d1489184dac2e9f5d144a6ec8

  • SSDEEP

    49152:193mKOlV3Rk2ewTnI9cV1zhr2gpLUOC6pW09a1e9XvIeOcQcySYSWhyYl/BMr7/t:ubRx9Tnn7r2gpLUj6Np9XzXTXz19V

Malware Config

Signatures

Processes

  • com.yonoservice.registration
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Makes use of the framework's foreground persistence service
    • Checks CPU information
    • Checks memory information
    PID:4517

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yonoservice.registration/files/profileInstalled

    Filesize

    24B

    MD5

    282771dda9f414e04a00e151907f8635

    SHA1

    be2f10c2ba092bed7df71fcff99a072ee2c6aecf

    SHA256

    51ec21fcf1df4e01a514e74af319bf2dad3ecd42003fd478f9c3d13b6741e701

    SHA512

    a89853883ec6ffbbda200597fab1a76a1b9fab5a0d26f928d0095445232059b6e1961bd58fa0bff6f4bcfd40756794d27b32315a1f8ff874236003583c433309

  • /data/data/com.yonoservice.registration/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    bc1683e567c0f8f66b4d4deb7c643290

    SHA1

    e44c23fd15b33665989cd9339277b721ce08d5e6

    SHA256

    a7546895de9edb81ba01c079ce16f51524b925bfba4b865f7ad51648fe9cfe17

    SHA512

    dc81b2864c8b24dc417f033b0dead68ab73a870fbcfac7919a87ffbe5b78f04872038d8292c14e071f5526a18ee8a0301c5270b8d4670f66b6a0df7146290173

  • /data/misc/profiles/cur/0/com.yonoservice.registration/primary.prof

    Filesize

    2KB

    MD5

    3f40a3add29c68243ae352b006e6a16a

    SHA1

    05a030a47f897d5b3bbd0bbd5cb9869356a1a358

    SHA256

    e92b3847638d82a6123f739de5568918e4e09cc8e1966084ea086f54e0a7a41d

    SHA512

    7d34b9277407f19d8c79f61272e7c4aed08f8581a28af3f7a41604026441687ca1b5fdbab6bbde43b01190885fd4c69baea5d2e80a25eab5b1310afc27dcab17