a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798

Analysis

max time kernel
1775s
max time network
1659s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
18-12-2024 11:48

Target

A16878598E0CE5924FA45C09319B48E566F4D935626042BA378F4F1F7B9AD798.apk
Size

1.9MB
MD5

cf8e1c24065c6af0d2c64c8e454dc808
SHA1

e2f5c145d78ea874ed2db9e99e7428e16c580860
SHA256

a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798
SHA512

3e1fdd6b2a4039c2e57cabab82d95cfb7e2b651e99e896cc9a1d14b1fed6e849f0aca586db1c573ea13070681782b9dcdf1198fe7b01f635925b0ace69a9e215
SSDEEP

49152:7eNdbyBQvhSYzrEI4nZTJQnoJuXpEUByge1:7eNMQ0znZ6oJu5E

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.zrwilvjx.myikbhif

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zrwilvjx.myikbhif

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.zrwilvjx.myikbhif

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zrwilvjx.myikbhif

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.zrwilvjx.myikbhif