929f2d444be8d12c440c6521709280861068581cd2456f017de971f25e06e9d4

Analysis

max time kernel
47s
max time network
156s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
12/11/2024, 03:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Urge tm .apk
Size 212.2MB
Sample241112-ecbckstjfx
SHA256 929f2d444be8d12c440c6521709280861068581cd2456f017de971f25e06e9d4
MD5 b543350246242e4221cfe1b0b9c09289
SHA1 b689b32687d488e809ecc2e399a138a4c89d67ad
SHA512 2d18eab638936758e9037d3b87636768557b33d926e3e5042087fbd3227a92e41b631408fcf4bb54fb9c247d9a50556a04902d9790e8e395bbd70503d3db951b
SSDEEP 3145728:x6XiPwH1qFsYaU7D/Qs1+NNUrbScoTE7GYEQ9P1r+0QgLD0ftArHR4:xCscqlaU7DT+MWR47x39P1K0VLgfQ4
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.sensitiveusername.utm

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sensitiveusername.utm

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.sensitiveusername.utm

com.sensitiveusername.utm
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4768

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

chikannosyoudouif_sf.sav

Path /data/user/0/com.sensitiveusername.utm/files/chikannosyoudouif_sf.sav
Size 79B
SHA256 1d0374dc22e24a3f36fb24c1a9ea85a0f48573a7c03eadca27da6a0d08e440b3
MD5 460eb59051b9c03848e786f10c650f80
SHA1 1c6a60f3dd356989f038579fb7f92534cb07432f
SHA512 dfe0f80a13ade064dc4bf94ab2453f1aec5cf627344d81d94dfa5eec520e9cc0896930b94b8def814e001e68bbaa2717ad1035ab25856bc4bf1b20437a56662c
MD5 SHA1 SHA512

Submit Download

chikannosyoudouif_sf.sav

Path /data/user/0/com.sensitiveusername.utm/files/chikannosyoudouif_sf.sav
Size 108B
SHA256 626250e005e85d73f4e3630ecc7418ad71b34211c99c93fb89b4409ead149832
MD5 ffaa92a905d9b210e67c51b6e9f7388b
SHA1 3b6d3d6fc5df5e430ab304490c4d78d9df6a9f67
SHA512 ef1063283b6910abd9146f642c794993725c07ab4f7cd80121bb5d4791620670ab1cb9a8e41c3ecf9bcfafcf94081c62e81c0b18d3bdc53fab146f2ca1ffac7a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads