Analysis
-
max time kernel
94s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
21-11-2024 07:22
General
-
Target
HM!_Esp (EroGanso).apk
-
Size
156.0MB
-
MD5
d05ef6f5dec809f11110f5ba25455cff
-
SHA1
c6e4f6a696ecd4b1174f7c4d894a1860e8f73675
-
SHA256
8f72dfeac51ecefc3c5d82276e291ad403eb596c05c2e0f2bb5fd8267388a680
-
SHA512
3a3e24b3c8f71148a27c25b6cdfc9ed3933df2c3736f23a9c4614bcf5abc5a6833e3610c5d8037abd732d9f1c3b536ffa2ac98c5996f8f8cfbfc65cf851eab26
-
SSDEEP
3145728:H4+l7IRSwexO8V7ZCJqowffy5lKFVUHY+W7xCgk8mcIfVBm7RZ/4OiVKk3d:HfceaJoffaUFVUHYxUUIfVkgOI3d
Score
7/10
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.key.pix1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information