Analysis
- max time kernel
49s - max time network
157s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
13/11/2024, 17:57
Behavioral task
behavioral1
Sample
aumentar-memoria-ram-interna-copy-5-0-0.apk
Resource
android-x86-arm-20240624-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
aumentar-memoria-ram-interna-copy-5-0-0.apk
Resource
android-x64-20240624-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
aumentar-memoria-ram-interna-copy-5-0-0.apk
Resource
android-x64-arm64-20240910-en
4 signatures
150 seconds
General
- Target aumentar-memoria-ram-interna-copy-5-0-0.apk
- Size 7.3MB
- Sample241113-wjrftawkf1
- SHA256 262d3b4fd3a1e21ea2092cf93109512f4b241ea3a6da1b32555a69636bcc3cdf
- MD5 aa59f02b4e95ee3fdd00ae55978deb4e
- SHA1 3cd2fe989376cfe82a82ff6550586854c337d0b0
- SHA512 11566126fa01365eaf1cdef7bb5cdac9c1ffa0df7725395df4f4ee625b2acc1cb5f855bcca9be9960a63e57360387a06bbb1935ee45bb4318a729f68b6142b5b
- SSDEEP 196608:3M0TBvJYqN0upHcjyZ/xrcme8Ty9GCLLmu0f3rsZit:hNNBpHcezAmeR0PQZit
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.mobincube.android.sc_3H3FLE/[email protected] 4987 com.mobincube.android.sc_3H3FLE - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mobincube.android.sc_3H3FLE - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mobincube.android.sc_3H3FLE - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mobincube.android.sc_3H3FLE - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mobincube.android.sc_3H3FLE - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mobincube.android.sc_3H3FLE
Processes
-
com.mobincube.android.sc_3H3FLE1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4987
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.mobincube.android.sc_3H3FLE/cache/app.dat
- Size 1KB
- SHA256 54e401eb590efbacb0691d19cdda01b6ffc3abdb1a30d3d7e0d9be5910246a52
- MD5 b43f137197add8ca6b7247166566701a
- SHA1 5cf3158833100c89585e59bbfea1234b3b98ab8a
- SHA512 4cd12c125fc15929f162d0e96f48780c1845c65aaab4b4b5975d7264ce269a5983a811e8e30ab97cd286fcb0bab7324c23dab2cb8c133619601e4c0bc257b6ae
- MD5 SHA1 SHA512
- Path /data/data/com.mobincube.android.sc_3H3FLE/oat/x86_64/[email protected]
- Size 334B
- SHA256 8ca0f1675a2ad152f12c0039a7052008c6ec672d718a1bec6d3a487cf9e86738
- MD5 946f67f2bbec3ba76d4c39ed37a24a03
- SHA1 e1016fdf9aa210250900cd545fc8dfad00e767a6
- SHA512 fe717326ace13302114aeb2b76559576d8c85da841b3f0e89473b93447dc9b7ccb2e586178c086a2906231ec6f53f74db5f4d2a2cfe00ccce68c7bf20252ee97
- MD5 SHA1 SHA512
- Path /data/user/0/com.mobincube.android.sc_3H3FLE/[email protected]
- Size 3.2MB
- SHA256 cd93973550917ea1acc9683758d66ccd7f03b3401d26eb385b65613987cbe90d
- MD5 e078d5724ce1951610c1bf7cfc248651
- SHA1 c11ea6d9e5d2b29f84e394c1e262683dec28b950
- SHA512 57106f92ebfafce239639115a7eee5f19a1cdd31f7f4e94f3056e24cfe9d9e2494d055cfc250f248ac5595b4e84dd52eb288bda1e199599e27566d29dedca413
- SSDEEP 49152:Ee0pDcscVYApR/+T24+SxYrrwRyzkhZ+mStd:EgscVQNS6f+n
- MD5 SHA1 SHA512 SSDEEP