6f0098f82cae0dd57063a54538573aedb4d5583e7a46a0f0042c50a5340bbf24

Analysis

max time kernel
47s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28-12-2024 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6f0098f82cae0dd57063a54538573aedb4d5583e7a46a0f0042c50a5340bbf24.apk
Size

4.0MB
MD5

078831862cccb884de3cabfce7206cc7
SHA1

82da9763df75189a1b895984869e9799025c4b7c
SHA256

6f0098f82cae0dd57063a54538573aedb4d5583e7a46a0f0042c50a5340bbf24
SHA512

97a0d732f9e046cb3b486783b995e9acac7d81f9664fca7fadc806c12dc6cb85acbd35fd9b7cb6932776532a28ac8fe3d758ed8600f96801d85fa995a6f5516d
SSDEEP

98304:uMTwrB6MH+QDvXG52fw0Yf7oWHe4snUxxE7fBHbFD6PmKWoxCYsdr3:5MH+QzXG52fhYfMWH5snx7fBHbFD6rL8

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.errorforcode.netix

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.errorforcode.netix

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.errorforcode.netix

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.errorforcode.netix

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.errorforcode.netix

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.errorforcode.netix

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.errorforcode.netix

com.errorforcode.netix
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4934

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.errorforcode.netix/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
bb2a8c069a8190a1b2cea12963716a85

SHA1
f9f6f70a3ef80e2030ca20a7b1feba52efddadfb

SHA256
375c01f5f05beade459b1c04ce82256f805d6673758b36a8cbb09d216169f21e

SHA512
10a34aed5ae7ed7a76ae63b67a400317b7b01dd1c06cba3e08b39ca376b662e0dd8477824e96403fac86756a047b30e63a76ba7e99d9a1447015b1875e11f706

Download Submit
/data/data/com.errorforcode.netix/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
58d5a44e0d44c010524ca1c4b9c787db

SHA1
e834c890182382e98b3a2e32933e36395a0f2f92

SHA256
fdbbc49a77a93859116cf3df07832ed07f96d298e2940159b183944a21ce9c14

SHA512
8f4661aacb98a9642b7f4e9df809f1c9f1f159335c5fbf39101eb5efdf01538ee925f8049f36c720037d36d829016e2d015346340929b5e3b1d6362cb0fe3a4c

Download Submit
/data/data/com.errorforcode.netix/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
178457d6263dc3bd1b9152b927db844c

SHA1
f4a65c03f564ecc41013885f52b795b924a75719

SHA256
239c8d02ec89b769aa101f5b0c4d9da3b140cad02697de5c2ec513783628b134

SHA512
6dd582595b36f710c73d6d4740708a6adb5ad52372855bb754a116225151d6f28db34d2e7f35730c465a11ee73b2283c31bbb57f4e351b3b191f503a8e719864

Download Submit
/data/data/com.errorforcode.netix/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
916d413a187b40f378256376081b6d0d

SHA1
d3c20e19e05e97a649abccbf4e02eb7d5240d8ff

SHA256
1ef1024f78b554686986e647ce7de85e6caa89b94205fcdb092720a7608184ec

SHA512
26c419156e56ce4fdc36c84e09d4e2d9a8598f4cb93eaec4f2144451c3505ee3e8c6ea0e2af49700b5e744301416858501a155758d9567aaa18fd3d4b5f4aca2

Download Submit
/data/data/com.errorforcode.netix/files/PersistedInstallation5138588177766435007tmp

Filesize
90B

MD5
210ddc7f971e57cf54794de63277ae3c

SHA1
870ce8ae0bd0b4fb5ace4794eb7e4515acece95d

SHA256
eb58c8fadeaf35e7222bac9aaae1b63f8f0897aa95759e2e64fc5327e7d6fb6a

SHA512
afe079b28e64084771ea859f9d6da93bd18696eb767604566d615aea16e96b8e952507a0b070240a7769dbb105ddebf27df9e7f48650291f5bba91428815a6f1

Download Submit
/data/data/com.errorforcode.netix/files/PersistedInstallation8128645712957424278tmp

Filesize
568B

MD5
0d0ecda663d5142d144fe78edb0dc078

SHA1
73b4f27a20ad838b62280815ac00f5d8ba5fe51d

SHA256
3f676754a1823398db0565a3c1d9cfd9b68a74cfa7c77d59b1e9246178631dcb

SHA512
3ea2db9162421029003d6004f49b598c08edfefee4a3b744d651f91a7c93382cb4a2a61fd2baa14914316a7923d6ab38ca9e894888adcd9d23a0f0a2c18a888a

Download Submit
/data/data/com.errorforcode.netix/files/database.db

Filesize
155B

MD5
ff03d16c415adc3a3a2f12419c8a4796

SHA1
831cb8e2066e51bbb3dfd971807bbffdeb3384ab

SHA256
ee1c8a14265093239cf1cde88c0358baddf07896d9003744af4702f9f4b8ba2c

SHA512
353c207977b5e7927dea5d5dae3b4f78aa985dbbf3b85d2bdf4876b39cc7f412a0da17766b3475b1e2126d2e06a1c7330961cf2b1b1ee7a6f0fcbdf48a1404b7

Download Submit
/data/data/com.errorforcode.netix/files/profileInstalled

Filesize
24B

MD5
4d5e81b20f8541e6707a2c36956a90fd

SHA1
a8d1b87b8fdf292f5df8e599ae731a4d49a921c2

SHA256
1afcab991f15964a0b0375bdbc892e8ab57480306471a80cfff57446556146f4

SHA512
e71c66d519c45d14af21aab37e01d9c590576c840234271f6fea8af2cf972ac1c94b401932f362c1eb5de9dad40c6f3b00b613cd7d02c41aec441bc49c0a8149

Download Submit
/data/data/com.errorforcode.netix/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
a521796647d24281a302003e3df233e7

SHA1
9631a5b9a39f6017f651d544fb6569770a3cad64

SHA256
41b486dc489ee4ca17876c5770722fae458ce72e1a0ce936c1ab6d31442b7b87

SHA512
e4946ce8867f52c93bd656b240ff0660a2a6101e2fab76fcecd537138b4bcece5ae02fd696f7fd48bab7a105e90897a428308761d43e940b86a669572813a2c2

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
cacadffab67bad73c819f6be8b48909d

SHA1
8c5fbcc0799c9a17d06c22a74638674801b9f30d

SHA256
724507af68aab7b218a028203842da6d93de99363498871c95931dff0c79dae4

SHA512
0798accc106b285d528094eb3460250cbc0e42281beb907e977070d91824609d2b35f1fbe697c1c2d1cce8dfa81afabd8f0425baaa897b560c5bfbbdd2d224b4

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
ab8959c715b9e3880b3e6cf943c4d999

SHA1
fc1e0192cf92fd70eb33fb410a1f36cddd96f5b2

SHA256
7e8741896b18a2af9cdb73c1bc45be93abbff12909b12c4d75b01b4e01966f70

SHA512
1318ca0d5eb89ed77610a9e8d2fa24f42db4f947af90f2bfd7b050675b29c03bf93a41da71bff426641c7f9c47e1caf7d5445558c830fe0024cd8b1b7b970227

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb-wal

Filesize
124KB

MD5
6a64cae5d8a3441cd80f242769eaacc5

SHA1
ca159a5ed4b894caa3e9267f5f0121188c8f7094

SHA256
853dab151a30927e2a510f261e4d4f84f9988823405b0204c39e6e1891c4f1fd

SHA512
accf0776a51fe3f6a7a02f05756d5294d82f22cd6c0662b52cf57cc951b8532d5c34b5a0d4ed4d2502b2fd289419f8336e6302cebd5393c47065511706a2e17b

Download Submit
/data/data/com.errorforcode.netix/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
65d06f0665a9a384452d8b9420623fcd

SHA1
6cbca0a995670030a8be12a3ea163cdd53169a8b

SHA256
7b0cf3b8ce2bdb686e9928418149d203cf5361b68e18b33563c59e5486db2fe8

SHA512
838b67c2b42ee460c61aa3f57f1c83d5d53f268d3bf7a59afbd80638343a69b215a1d81907bbdf14e46b8a0dbbd745ee73e89be852918429acfe1c8c22fee06f

Download Submit
/data/misc/profiles/cur/0/com.errorforcode.netix/primary.prof

Filesize
2KB

MD5
ca80913e7f7aaa7cfa71060e3959c29a

SHA1
3d23098679cf7f8c4461c5690dcf0c82bfbafa75

SHA256
6c752445d21078b9d6f3b297ab81e737a02f9767dfeee595cd8529d39569264f

SHA512
56ad1105ed4993affc62dc15d369a1e49f7e2c86178515dfbd75d1e68cfc1986d4fae1ffd9f15516e722d9e97e590872fc8daa473b503d4f87ef4183c4648eab

Download Submit
/data/misc/profiles/cur/0/com.errorforcode.netix/primary.prof

Filesize
4KB

MD5
68e38d8b6f1d547f030e4e2e466fac89

SHA1
1dc0fece1c2747dcf998285d9cdc6b4b78de93fe

SHA256
2c49f013a2086d06b491da15cd3e07f7e181fdeec622e237a1843a50cba501f2

SHA512
2d0784ab27a1c1d2e68ee2a82fa4c3364b83c6416755f3141292a94554455ff7d9ee632b84e6cb011e8ec75ffa8e5724e15acf58548fd942f513355f22a2b917

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads