Analysis
-
max time kernel
127s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
06-12-2024 15:47
Behavioral task
behavioral1
Sample
build.s.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
build.s.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
build.s.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
build.s.apk
-
Size
267KB
-
MD5
cf1832b4243205d3b3bca133d2129f7e
-
SHA1
7ce6f37d41ae1a6282cac0e285da75a2a2c4871f
-
SHA256
2aec43a86c635cae0ec5f4bd2e216eba61da36b65068a86da324224627193bce
-
SHA512
c3c3eabf2a59f950f3638e3360b6de2e2071261a553daedacbe74a16bb887c0f71005872338c79318c30facf0ba975aaf3c3f44d5d1bfd6f42e0551b44e83c57
-
SSDEEP
6144:UEow1GGGTBC22Lri4EvAj0pl30q4RMdBsMYW3N/90W:UEow1NaIbJjg0fQBs3Q9B
Malware Config
Signatures
-
pid Process 4586 com.etechd.l3mon -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.etechd.l3mon -
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.ACTION_NOTIFICATION_LISTENER_SETTINGS com.etechd.l3mon