Analysis

  • max time kernel
    131s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    14-11-2024 10:45

General

  • Target

    Sinergram.apk

  • Size

    8.6MB

  • MD5

    808d91881107a1aad3a5ca657a216c3c

  • SHA1

    613d2a9aed9fe2240a6cca537ad6361c99909a5d

  • SHA256

    a946908f67ecd089ee34cc9aa89a9075de754d09e4bd2a82481fa029d8683fdc

  • SHA512

    e02deb45782023e25487bff1e593724400018b7830e10165f711888a372f409a3010518a34da9faf491a0d5a297e55429e6a47986ed0a210e328ed606712bb00

  • SSDEEP

    196608:g/fZpFcXuYUm01PAmsxEkCRbepJooHhp9bG790+fIFiufU/f80p:ufSeYO1PWEkCRCfthdmIFBcH8M

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.example.application
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:5066

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.example.application/files/profileInstalled

    Filesize

    24B

    MD5

    be13e0526226425b9faa7ab9ae9fd4fe

    SHA1

    6c9dfb7c12426154c2e1306dd4b90a1803464780

    SHA256

    a229f9d89d825285a6a794fa8b0d693122ad834b38da743ab2587b05a05a445e

    SHA512

    135e5e3f0ef26a5e922b821f1fdff02f0a7fc5c1dc861b68f4666fb142da4073038ebf4887033f940f365e727a41d4fda28661a733358ef626ae50bfc0f87198

  • /data/data/com.example.application/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    3e003049329c8e62365f78fdf390f653

    SHA1

    85bc3f8df85b50355dc38848a174c11d2c6f6d8e

    SHA256

    85b61dbcc0ffc609402e264ecf6cee6deb0521bd1635a2152a9137b870146ee7

    SHA512

    ffe657f4ed1852d610b1707719f546e7c2cc772ef846121ff461101c31f239cf4cbe42b717f11f8bf8b27ee6e87694d86ee1323734a5a0534cb593e4457d7f45

  • /data/misc/profiles/cur/0/com.example.application/primary.prof

    Filesize

    6KB

    MD5

    31f034348980ff7afe3dcb170575e77b

    SHA1

    04b73895a2b31f1aecdc798a36d803559574b434

    SHA256

    08e843b7fde86451d66bb0b4d41eb76ae12637f3d37310742e8b1f5c77d6f87a

    SHA512

    3c265bac21c894c8fff73993575b5b88b1d9e5c98ef37f25714a623fe190525a0bef11b84d85a2d8fca9287be3934d805289f7e8eb29b35c1eb9a07962dafb88

  • /data/misc/profiles/cur/0/com.example.application/primary.prof

    Filesize

    9KB

    MD5

    9a7dc923dc350757677be6a4d10d2214

    SHA1

    e7386843f73ba7e46b823e65e6d54fe5423dafbd

    SHA256

    8b9b15418e5c94f1d7bc35f478d11772f145ebde4ac7cfcd0219382232f44531

    SHA512

    6e8847f485f1a7bda5cb8dc434e50524a62b9ec6486500c84237b8faca6f36572a4096b32d6534c207968fe182745d4ac281ef684d2de4d3839c33d343ccbd04

  • /data/misc/profiles/cur/0/com.example.application/primary.prof

    Filesize

    9KB

    MD5

    0bb2cc97a460232a11d425c030b313ec

    SHA1

    fafa44a1363947e480fef01199d010fec2d877a4

    SHA256

    2e9db08d5962050f86a16f11601dbdb98ad0589cc2650289aeaa1cd544c8c3de

    SHA512

    ba4ff868ef6e8a61619f6d6e76b6e2cc629cf7f23640c63ebc3bf444ce7b5b4243d857f9f7fce8f1f6f0e62d8a085a32995df46e5808452a2ec7a2dfc15dbc62