Analysis
-
max time kernel
13s -
max time network
156s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
19-12-2024 16:48
Behavioral task
behavioral1
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70.apk
-
Size
4.9MB
-
MD5
25ebf4b9f77b51dc09eb8cb590d737e6
-
SHA1
dd5f036a591611603b964e9c7bce3d901657b67b
-
SHA256
3c273166c5221614198a7bbe0ed8ed0738ca4b62321a8d44a43fa7353a9f7d70
-
SHA512
476d6d41484e1fbdba4cbf63539081b5616d1edc41fffc98062e87bfcfc7cdf2e3a195b8e64861ea7f31a7a26cb48f1c43a3cf5b006bf1d61d973a7607cc9a8b
-
SSDEEP
98304:aPfQWnSNff2dCFZuM876xK9yx3qpA2DSaX+SexUQt7i0rJDuE:aAQv76oIx3qO2DeSemQjuE
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.arzdigitals -
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
description ioc Process Framework service call android.accounts.IAccountManager.getAccountsAsUser com.arzdigitals -
Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/contacts com.arzdigitals -
Reads the content of the call log. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://call_log/calls com.arzdigitals -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.arzdigitals -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.arzdigitals -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.arzdigitals -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.arzdigitals
Processes
-
com.arzdigitals1⤵
- Obtains sensitive information copied to the device clipboard
- Queries account information for other applications stored on the device
- Reads the contacts stored on the device.
- Reads the content of the call log.
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4488
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94B
MD55175b278a2a69b8579a47f4c050a8a30
SHA1dd039202da62f4fed067f3356352c0c82e3b7806
SHA256afcd39a81a2f3e5fd91bb7235894e0f4693c9f3a68b746b315be391b3e9be95b
SHA51241d6b3d29b78f90782d90ca2f580929e83efc3b43ff3316e09d25219f614abac5f3fa41244758d572950ad6343a5f07b22807957c15a95012ea5319f1939a805
-
Filesize
179B
MD5acdc62feaee6ef800f02ce3e08de5d79
SHA1a916fc4268764050205bcadda5bed4e0e87a0107
SHA256a189eda5e6a53bfdadf1165b73bc0d721595841a126d0e81dd7c6dccf25853f2
SHA512f5da82da2ed433238950f7f4b493994755c30fccff861d38b90f2e9cee9d4fdf8d012bfe5357f55d29ebc4b02b47dd4525781d17483a5c8706c9c446e990dc6f
-
Filesize
51B
MD5e6764e3133a0bfa2c03144f95903fc7c
SHA16ee8a3cfbcdcadb6b10ca38cfebd3ab0b4d03b0f
SHA256f52fe7a8496b997a4701ccc07d0ee8772a7545596ed2a42a45538a8298a469e2
SHA512cab665d7b7cacc8d278389cdc590b342f2c71023308bf91026d1daaa2c8f4dbebd8dc31bada7aa873fdf51003a306c9abe24649d5d938bf08204a2b4084181d1
-
Filesize
51B
MD500cdd8b9939a3c3ba4add7631192312c
SHA199946372286dc20f85db9400f44c49fe2701c3ad
SHA25697902602a4f30351be09fce70d7473bef4758a45b168810f7c264078116483ac
SHA5129f607b5a2a3192b23d09f988643d00d805c297184d174377ea69e6fb8f3490c5c9efef6e149c58c3f8446853eab63d70923c700f37405b3433923309f2ff54fd
-
Filesize
51B
MD5fa999e0d2342a6573a98a9f44abfd33c
SHA17bb54ec86faf1de8ce89b3f52f8a26d97f598ef6
SHA256b54246f9ce8f0fa7063c0aeac7a5db66bc6b14da853e512f021b9bf1c4ed3248
SHA51288efc225db268ddcab1ed02252fb33fd45b686f2b332c074a864a7e275fac6ecc89318691d0760ce65b91201a909a5a493292918bfac0c8d4ffa08f67872f88b
-
Filesize
51B
MD55a9c9330d501af6098c2bd162b20f3fe
SHA1d5e5bf8d5a9df50f8d9bd5c05c822c79d1ec9157
SHA25613a6bbc61497cdb88eef9bad03053b6b56779bcc62f8a54e86b8c21cf13139f5
SHA512e458cf9423dfc067615e7043d619f08688fdcd5dfd3b10a9d3c00a2cc0d578b83520babfbdec79652fe3cd27c0ef5b2bc68091de3353e219f432e159907422f0
-
Filesize
336B
MD55c7095ae2700d4e55d991b430aa965f8
SHA139b3bf33ab970565f775d758e6ba3c89aeb4e236
SHA2568aa0f3508b30a67ddc710fadd000215039a4f93c08fcde8cc399b0f71b2c65a2
SHA512409b0c26cd649ebf989844fe9195830e04937bcd316fa0299738858b71312b7c7cada7742b6cf01f415127c1fd6467a2e17c6e7e65d39eaf0635530be0a9bde9
-
Filesize
329B
MD577005af89201c7d9f096361f8e4593ba
SHA1828c888ce671f4085d9f05b04ec5684bdf4b19bc
SHA256ef366dde792e48ad5579a89ff26403ffa68aaf1b290c2090c2d6551f8efbeb32
SHA5121409e4280fd1e97d30357a447f3dcdacd0c522cdca3f94acbab8598d1b0c4997e17ffcd2ebcf3130e72681bf09f634dc297d6b086e095c4668dde54d9cc99db2
-
Filesize
256B
MD5a0815d8002e0a0b4f9b0d805a9d83d98
SHA1e5708007b19ac4a9d23ed9fecc1e647afa47c7dc
SHA2569a6b12b99f76a363e0b8689127d4921cfe474bc837ef2bf829cda935699a4775
SHA5123a20b5a91334516ece668725c6ac8b031957e0204831433a4bade0d799234d2fdd3a4cb080869ce93371a3601b5035cc9517402ea26df8f0d9a9a9af9a3a44cf
-
Filesize
241B
MD59d9b68df94424e8943166a70105319de
SHA167c073e360e378c41118e4bf453a6e14c8d76960
SHA2560889451aca305dabeef4924b47c2bf2930f321515bc46e7a472e165c14d15df2
SHA51206eda816adfd3d3ad3a997d96eae0a21a95ed4c742272dc6d5602f8aa14b9ab22ad0189aed538f63ccfe236d492a586e923e0ab4b0fea4c8479a1cb538be07ab
-
Filesize
256B
MD54f38c2c0414ad1a24bfc70345dca259f
SHA19511f12679fb5dc6ad21c2ed368d41834d2cf020
SHA256f8b60f6761e94cb29bf8241d8e238dcc45fb1c0750dead93259887464dd1776c
SHA5125ec0f8f9f671a63a104516057f8e7f0960cab1593eee30a124ef52171502136f2477a9c34d2d84813624c93ff94804ef0089b6052e6d92dedfd8d80ee8d46206
-
Filesize
241B
MD510ba724b7fa562fab819c281fdaf92cd
SHA16dfec47e22c312612d7d527112e4455e6a2f640b
SHA256d8e97e0bfa0c1cc13879c076655166c9e37e1340daf963293ed08115a4240b7f
SHA512865de94154ab648455b51c99dc43e1ee4a22224c4e64da29640bf41faed56876926828b85c98f9d6eec8049a371dd42f90830f5f5ce956257ccc6493bb4638c6
-
Filesize
256B
MD552b05c275b1bfb2670ba9906ffec0b18
SHA1a95883af8fb2442e4bac13976a2b9fc3e0dddd9a
SHA256f99a5a19d83965bd89bb44efc556d035ddc6de536a4f0849216f9705f66a9b00
SHA512a36a85951c6c54790ce21a4ccf3f20e3a39aed96dfa049455e5991ad347cdcf9525fed70948e52f709d6d4ee8ae5b71dc36b3bcf47c0d656d7d9fddfd37b4f7e
-
Filesize
241B
MD5895d7d7d622b95c6f11597b170f214d3
SHA10a61e852421ac011d1992b42b0860676b9fc2f0c
SHA25610dde903ab659ef0e48bbbc2fdefbf229db54b55f391d0e03218f1a5be8275c5
SHA51278c2cb5cbfc35e1bee2c70430e7d806b3bb2abe50138b31a01b8cebf570177dbad1e16139b82ec2ba9430d29972696f4b8d9ad155f786bad4e04193b3b944eb8
-
Filesize
256B
MD5114049b3896e58db15ff808cd68c8c72
SHA1f7ad32ab5d27e50f6cec51bfffd54c44266cf3f8
SHA256a0c79df54a8b72682837d73bd472e7fd805a9b7dcfdcae0f38aa81d715fdb8df
SHA5123b63e863ed0fc6bf5f2d99563b0bd52bf6848f86075f2f553da6e0c5777197ac9a5090d4414b150b48678d764e0a748f72fc4f95d7815c8b4c69097f2602bbce
-
Filesize
241B
MD5902ea7a01a1523b6756120b9e11e6b8b
SHA1928e2275bb979a72c881a7606a46f0f1d58e681e
SHA256d6de905a79001f17583b6600bf49bfc18644aca43a70aab918f3c641a5b97174
SHA512725fb2ba9e026021d8dff6cfe7dd4bb5060e0ddabd8d973d46051eb5a82d2f8e3a51c649978e51dd02cbf2b2d73a66057490767424b7d3bb07ac4691b43a0fe0