262d3b4fd3a1e21ea2092cf93109512f4b241ea3a6da1b32555a69636bcc3cdf

Analysis

max time kernel
33s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
13/11/2024, 17:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aumentar-memoria-ram-interna-copy-5-0-0.apk
Size 7.3MB
Sample241113-wjrftawkf1
SHA256 262d3b4fd3a1e21ea2092cf93109512f4b241ea3a6da1b32555a69636bcc3cdf
MD5 aa59f02b4e95ee3fdd00ae55978deb4e
SHA1 3cd2fe989376cfe82a82ff6550586854c337d0b0
SHA512 11566126fa01365eaf1cdef7bb5cdac9c1ffa0df7725395df4f4ee625b2acc1cb5f855bcca9be9960a63e57360387a06bbb1935ee45bb4318a729f68b6142b5b
SSDEEP 196608:3M0TBvJYqN0upHcjyZ/xrcme8Ty9GCLLmu0f3rsZit:hNNBpHcezAmeR0PQZit
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.mobincube.android.sc_3H3FLE/[email protected]	4591	com.mobincube.android.sc_3H3FLE

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.mobincube.android.sc_3H3FLE

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mobincube.android.sc_3H3FLE

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mobincube.android.sc_3H3FLE

com.mobincube.android.sc_3H3FLE
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4591

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

[email protected]

Path /data/user/0/com.mobincube.android.sc_3H3FLE/[email protected]
Size 3.2MB
SHA256 cd93973550917ea1acc9683758d66ccd7f03b3401d26eb385b65613987cbe90d
MD5 e078d5724ce1951610c1bf7cfc248651
SHA1 c11ea6d9e5d2b29f84e394c1e262683dec28b950
SHA512 57106f92ebfafce239639115a7eee5f19a1cdd31f7f4e94f3056e24cfe9d9e2494d055cfc250f248ac5595b4e84dd52eb288bda1e199599e27566d29dedca413
SSDEEP 49152:Ee0pDcscVYApR/+T24+SxYrrwRyzkhZ+mStd:EgscVQNS6f+n
MD5 SHA1 SHA512 SSDEEP

Download

app.dat

Path /data/user/0/com.mobincube.android.sc_3H3FLE/cache/app.dat
Size 1KB
SHA256 54e401eb590efbacb0691d19cdda01b6ffc3abdb1a30d3d7e0d9be5910246a52
MD5 b43f137197add8ca6b7247166566701a
SHA1 5cf3158833100c89585e59bbfea1234b3b98ab8a
SHA512 4cd12c125fc15929f162d0e96f48780c1845c65aaab4b4b5975d7264ce269a5983a811e8e30ab97cd286fcb0bab7324c23dab2cb8c133619601e4c0bc257b6ae
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/user/0/com.mobincube.android.sc_3H3FLE/oat/x86_64/[email protected]
Size 601B
SHA256 1d0a0a894608a2523b257929d268ae3b5a0e256c7e00b5bba3a5455805a903e4
MD5 6824245ded4a66dac4b7410a85d3c80b
SHA1 3cddd57cbafdfb57fa4c6874bda96017d9f1f88f
SHA512 aba0abbfc3330d4a098eec9739d2411ec3f00c9e53e164d646afb6246760a86a533edc73f4e3d16564f2bbf42d342e71a7d0bb7f4273d6bc818f92e1f9241c51
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads