Analysis
-
max time kernel
12s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
19-12-2024 16:48
Behavioral task
behavioral1
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
-
Size
4.9MB
-
MD5
25ebf4b9f77b51dc09eb8cb590d737e6
-
SHA1
dd5f036a591611603b964e9c7bce3d901657b67b
-
SHA256
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70
-
SHA512
476d6d41484e1fbdba4cbf63539081b5616d1edc41fffc98062e87bfcfc7cdf2e3a195b8e64861ea7f31a7a26cb48f1c43a3cf5b006bf1d61d973a7607cc9a8b
-
SSDEEP
98304:aPfQWnSNff2dCFZuM876xK9yx3qpA2DSaX+SexUQt7i0rJDuE:aAQv76oIx3qO2DeSemQjuE
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.arzdigitals -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccounts com.arzdigitals -
Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/contacts com.arzdigitals -
Reads the content of the call log. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://call_log/calls com.arzdigitals -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.arzdigitals -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.arzdigitals -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.arzdigitals -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.arzdigitals -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.arzdigitals -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.arzdigitals
Processes
-
com.arzdigitals1⤵
- Obtains sensitive information copied to the device clipboard
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of the call log.
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4955
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
System Information Discovery
2System Network Configuration Discovery
2System Network Connections Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94B
MD5cd308ec05dfeec196632950d4b3e3f76
SHA1edbffc0918dd1f1a5d7aca4880e74e947b8f4246
SHA25612ddb46f4488ba63ceaa54ec36033e9fa88eb278292052a01a99a8672a85a8cc
SHA5129baa30a7f6df7b03598547ec4b5306141e35f01e053f6075160fb0421bbc58c78e105ac8f2731d500feea0106db835414f9809ae0fbd3c0bc45a53e944255425
-
Filesize
179B
MD5c083b8b221587d305e45d4aa6f9cb252
SHA15c57bd4f00c47063c23c71a91e7a7154062f06d7
SHA25603d1aa8b41c212da76594d5a1073ddbf21ece15d3b7da43a786d6900f3b3a8ad
SHA512ce720251203048a570b82fcff25f77b04d68417751fc25e0c7a113a3486185b630a9a8d9e49510e08b9f4646b02267acb7dafc42d309156e4465e47398f32e56
-
Filesize
51B
MD53c1c6aad67802edea6486164eaa89241
SHA15f162cf654f3c016ffb59676762cafd3b4c151de
SHA256cdb197c9a4c56b01f86c17c94cc5b0b520d0e0c33274e4a180eb0167831d946d
SHA512752d729ad93557a0573112139a8ebdf099fb4a6bd7e71d45fc252977aa89de0c3c0c489cf58bec811d4b8bb01f01ea89b625cfa99b2919583c7261563ef22994
-
Filesize
51B
MD5bb78f36279a3e3c2f00b6e070f85bf10
SHA184e007e2f9e3064dbd0f666c1a56d5ae383a141e
SHA256ae45bde8f11dff57e6da499ce1103033ba47a518be0ea4492250c86761c0c891
SHA512690009f352a683547d30046f0fa50b8affa969f5919a7da09fce8d58c214e7099653673920e6c75258b89caa3d0462f5fac15346ee6e17aa717510b309baf2b7
-
Filesize
51B
MD5bbe40f253d21fccbd7749087cb59ef3b
SHA1b3f507de929288cc8d50fd2aec98478c429b9230
SHA256f895eca606969ee4505e5d0df66ebf3120d05a9c4baf81d907e2d61e5ad8ae30
SHA5127305a646c8ba442a5fbfdffa1959aea9d66d1bc122f129e75e7289b209926a4c2befab1903de8fd1a435f8d7b3d91b44e8c107c36e6d5307d20c64570ec456c6
-
Filesize
51B
MD50e7f5df20cbd6c67ae72f2be803da93e
SHA17fc8f52453005da8ed1c515a627997b98be393ae
SHA256a46ac4a33acfc8547603a0aaa45b727ba648b939d9596d4828baa1517593065a
SHA512b5fb9d8b9b5c2bac7dff74398e5aa70452e74e1d4c955ee923c82aa4fc5e74fd54426b2d06e55b22be5a8fcee772932a18a04bd78c6bdc1b298d11a0513e5629
-
Filesize
336B
MD5ca66bce60926a6844d7aca4255a08f8c
SHA1d0e478d7495bcf65f657297368d614ba62d5edf9
SHA2566b3c62039a282650930336431d663975a485b17de3b4aeefd9a295123be503c8
SHA512d6c71b8af2cd77877ef2fdb02cfb29d0b5fd00b2c5b5a6cfefd110c463f2e76907162e37cf59c98478075d9a4f9733d8d771d5e2810d9f9c896de445b9db83c4
-
Filesize
330B
MD57dffebeaaa101b83dea82c350cf21cf0
SHA1d33547a8c7104a26560b3ff43bf97c560611af0e
SHA25633579676aa5add5aa5b638c169679217db7cbf5145e7b626fc3473b4abb2a177
SHA5122b868d08fff4fcc3a1785f6982587650194ecc563258f16879f4469c63032b20119ca4971f326be13629c9d102fde19c6995fb4cb4c51b519da81764caf18036
-
Filesize
256B
MD5b325d0d3653849d0e0fd3df07f43f0d0
SHA1ee292ae32cb2dce01fa1b928e14d1d782d8f32f5
SHA256ef9fc58430a68dacb9190291ca917661da328158f607c0407349ba0d5608fa43
SHA5129f16b064bb5c3db066bc2c44d19b87c65f4ce7e89f268dfdfb225284c49ab38942d1359287f6bf5c3ffb59fdc63fd57b33b231c2ee36ab8c37b710a50b7285ba
-
Filesize
241B
MD5970a6d4eb31358eadcd2ef4fe5f64ea7
SHA10bd906a3e6d2fc7e29f001a01004fd7fccf18c2e
SHA2560d9b8a538db2a71e213c1e46941ef87514f57ff47b7b19f5bba70509b6df0306
SHA5129581c10cd35ae991e40d6a9271e3b3b519f55d357f2785a1d30ae4863d495f36b5e1a5d6e79d4eb2082e6430740587a43391c63bf0ab1b57b9788ebf3f61e0ee
-
Filesize
256B
MD585623a386629a17fd3724fae2f248ebf
SHA1e778053fa128759362e133a1ee30045085f5519d
SHA2560792de518bbc313f1dbfad0e39af222996a3d5c10c3641b3526bc3b97aaac0d8
SHA5121923035a79a9e89f73694c8435a2757b35996d89278f28d9ea062c949126bf531484a0ec2ba1496e492203d1ede298fa5e0e044600136dfed3fb3555fe691689
-
Filesize
241B
MD58736b9a3062a2b822f45ef438d71b03b
SHA1a5afe6fb2d7572170dfc4cb0b3029b301829550a
SHA25618173314335c4600851d89a5367f18ca2376b8af757db0086be6b10394809cbb
SHA5126528f621e5d091fcd4ec35643dee682cb280d33a0286a9c5c2d53821250402901274ca57402eaa96721f00be8bcf1d573d0ddf0abd5db556bb3cffe2a561f874
-
Filesize
256B
MD5d09e5815b63b9487f586941c7f1ddfb6
SHA1389c68d6cf704c14f83d0a3865d094d6d67d4d8f
SHA2569659fa623e96261ed202ac021b3e2384549a3c3514fdbb76cea9e52cc65f40be
SHA51296c15a42f5b33d57788aeb82e5237286391741eb35cfb49a549e58b21ad82d9c82b188c606023bc1753db072573a0e78c3fecba09214728bd1d38de6e4cf8ef7
-
Filesize
241B
MD53a09d95d58dc1b36919fe7096120f4b4
SHA1d03a6a9ec6ac2e166e5dc58e13a3e6e4eb0c2bc9
SHA25691a56188d9125b49c333e724b9afa17910c653e7b3d56ebd80fcb926c3bbb7c1
SHA512cfc661a7aaabfb7b59cb50b0cd449f24ffcabb8f5a2689ffec3f15a52d12de416200ea397aa1a9142768bff493b17f8e238fcfb17a2b683a9d973d2d916ab4ac
-
Filesize
256B
MD5f15d536503133cfc42be4db407bba264
SHA174de180c871027ed6bfebabdcd99611c2e743c32
SHA256de3b2828f870ff8c22a98fd23f76d91f05ce6c454a7759393445d6d3a83ec188
SHA512e36897b7a97cdd25fff608e1c064f3752c1f685aae1ad88a34a079919e2edd00af19ff418806d7d315f7e1c906c237f39494b256bc479689097d579e6a7ae987
-
Filesize
241B
MD543078f38d8406a022bed6b9d6d4ada4a
SHA14240140243d52747db2008e5865baedf88a4523d
SHA2566069f2215bcda86e21a5353e09040c04e01f10b0a24656adc4ae4bb10ffe04d7
SHA51274f032d7cbfaf2f4dd93b9b9d2e86688fdc688828d330e9b941e411fed5db3febd9b6707589c000f38386c436a0420514fb4635a7f4d8bd00e03d6b95a79e0cc